591c58384e4a85c6740b769855871a2d0e5c74cb93bcd40f0713c1bc92ad5ca6 | Triage

Sharing

General

Target

bda00fb47fb3c05aaf2d86bdbf29c6a1_JaffaCakes118
Size

75KB
Sample

240824-afwqgavfjb
MD5

bda00fb47fb3c05aaf2d86bdbf29c6a1
SHA1

b53435e0ac728608b52fb6a1b23cfce7c3162b15
SHA256

591c58384e4a85c6740b769855871a2d0e5c74cb93bcd40f0713c1bc92ad5ca6
SHA512

13e2df863dea93f33e7d46496d9abb2ce1532ddfbb5b40a93ef52b6f46d1f611a06ec4d9eaf42a60156ce7a315d392024af0f50531652d6184ee24364d300f44
SSDEEP

768:v5g1e3lRaujSrR2c3jjAuiD6GFLth9SSpYlfRv1iA+wPZIxkZppR4RL9W1H593S1:rorR2yyFzSgY/vxIx+Zg9WpfCdccX

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  bda00fb47fb3c05aaf2d86bdbf29c6a1_JaffaCakes118
- Size
  
  75KB
- MD5
  
  bda00fb47fb3c05aaf2d86bdbf29c6a1
- SHA1
  
  b53435e0ac728608b52fb6a1b23cfce7c3162b15
- SHA256
  
  591c58384e4a85c6740b769855871a2d0e5c74cb93bcd40f0713c1bc92ad5ca6
- SHA512
  
  13e2df863dea93f33e7d46496d9abb2ce1532ddfbb5b40a93ef52b6f46d1f611a06ec4d9eaf42a60156ce7a315d392024af0f50531652d6184ee24364d300f44
- SSDEEP
  
  768:v5g1e3lRaujSrR2c3jjAuiD6GFLth9SSpYlfRv1iA+wPZIxkZppR4RL9W1H593S1:rorR2yyFzSgY/vxIx+Zg9WpfCdccX
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2