0545fc23af3695aab6ecb071b93cf6cee3ea3dcc18a4b460280f3e972a7b0058 | Triage

Sharing

General

Target

b73678129ee556bd28429be0cc198c2b_JaffaCakes118
Size

14KB
Sample

240822-l28spstemq
MD5

b73678129ee556bd28429be0cc198c2b
SHA1

e894019cbf0baab6485261ffd4d54ace84e3c0bc
SHA256

0545fc23af3695aab6ecb071b93cf6cee3ea3dcc18a4b460280f3e972a7b0058
SHA512

8edba57473890f923eceac944b968fac7631363bd8ba64ada910fd7865ae1de42c8198c25c3002d5607d0f5456d3a52b1e75bf01955ed30d99ca8236060e3e4a
SSDEEP

192:SjIuVoh8tbeq6kbkxKoPIyUMoFl1oynfJP2Oh+AOQOBJbZBEW1QyfiG:SjIAaIbL6kbkxRIyel11RlPOBJrXXfiG

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b73678129ee556bd28429be0cc198c2b_JaffaCakes118
- Size
  
  14KB
- MD5
  
  b73678129ee556bd28429be0cc198c2b
- SHA1
  
  e894019cbf0baab6485261ffd4d54ace84e3c0bc
- SHA256
  
  0545fc23af3695aab6ecb071b93cf6cee3ea3dcc18a4b460280f3e972a7b0058
- SHA512
  
  8edba57473890f923eceac944b968fac7631363bd8ba64ada910fd7865ae1de42c8198c25c3002d5607d0f5456d3a52b1e75bf01955ed30d99ca8236060e3e4a
- SSDEEP
  
  192:SjIuVoh8tbeq6kbkxKoPIyUMoFl1oynfJP2Oh+AOQOBJbZBEW1QyfiG:SjIAaIbL6kbkxRIyel11RlPOBJrXXfiG
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2