d52e2441a414e39e891ac7ff0c82a9d124467966893c0082426f1f040268b293 | Triage

Sharing

General

Target

b6d89ee7e4aaf6ec1c96d4104d25aa2e_JaffaCakes118
Size

153KB
Sample

240822-jfamnsvgka
MD5

b6d89ee7e4aaf6ec1c96d4104d25aa2e
SHA1

ad85f746d1e1578e5ead1d70ca85ec610a900399
SHA256

d52e2441a414e39e891ac7ff0c82a9d124467966893c0082426f1f040268b293
SHA512

4dd7100e5b0e774706aa6e762978f6da35cfd042fef70b4a273a282db02de73735cdb0133b933d226258fa982f04a545fc5504c5466d75d7e0ed48bda52d7389
SSDEEP

3072:BKDAfCDSmJOQ2hnCanbVqA2wIEtd81cw5vE73cQ+pjU:BR5nCobMUIEr8Z5e3cZjU

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b6d89ee7e4aaf6ec1c96d4104d25aa2e_JaffaCakes118
- Size
  
  153KB
- MD5
  
  b6d89ee7e4aaf6ec1c96d4104d25aa2e
- SHA1
  
  ad85f746d1e1578e5ead1d70ca85ec610a900399
- SHA256
  
  d52e2441a414e39e891ac7ff0c82a9d124467966893c0082426f1f040268b293
- SHA512
  
  4dd7100e5b0e774706aa6e762978f6da35cfd042fef70b4a273a282db02de73735cdb0133b933d226258fa982f04a545fc5504c5466d75d7e0ed48bda52d7389
- SSDEEP
  
  3072:BKDAfCDSmJOQ2hnCanbVqA2wIEtd81cw5vE73cQ+pjU:BR5nCobMUIEr8Z5e3cZjU
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2