b4c0314f6770de6628320fa5a94bf3bfa2ae45de92855a7cf5b779b9ec456dd4 | Triage

Sharing

General

Target

c1db69663ea261de5d2b73d56cbac089_JaffaCakes118
Size

14KB
Sample

240825-3y5ejsvann
MD5

c1db69663ea261de5d2b73d56cbac089
SHA1

85b40bf985f91e88d4598e5b3bae659468676e9b
SHA256

b4c0314f6770de6628320fa5a94bf3bfa2ae45de92855a7cf5b779b9ec456dd4
SHA512

03a922d68789c06ba3f27a3587ca211ed1e5db248012c3391008a96108632415617eedd4bb4e75510494dba9836951cb001ce6d250c84b9ff0ba39a0914e72e2
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYWmbZk:hDXWipuE+K3/SSHgxmWmbu

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  c1db69663ea261de5d2b73d56cbac089_JaffaCakes118
- Size
  
  14KB
- MD5
  
  c1db69663ea261de5d2b73d56cbac089
- SHA1
  
  85b40bf985f91e88d4598e5b3bae659468676e9b
- SHA256
  
  b4c0314f6770de6628320fa5a94bf3bfa2ae45de92855a7cf5b779b9ec456dd4
- SHA512
  
  03a922d68789c06ba3f27a3587ca211ed1e5db248012c3391008a96108632415617eedd4bb4e75510494dba9836951cb001ce6d250c84b9ff0ba39a0914e72e2
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYWmbZk:hDXWipuE+K3/SSHgxmWmbu
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2