a08dc439f87a1417472ba2a2d5248bc7d1784ad312cedec025ece713adb37847 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c171abbb15ded16a9bfb09ed5c53f78c_JaffaCakes118
Size

80KB
Sample

240825-ygfmms1fkd
MD5

c171abbb15ded16a9bfb09ed5c53f78c
SHA1

d357bf4eeda19d2e1cdb15cb1594dfa3c55f750a
SHA256

a08dc439f87a1417472ba2a2d5248bc7d1784ad312cedec025ece713adb37847
SHA512

3175ccc31c1e87d818d17f39e01c06959ae237220498754fee564c237e14d683d0bf5f0d9de926aef9df865e03c11c9031ab8601faa7bd3b55fe1eba3488cf9c
SSDEEP

1536:hbhbAmm8x0UD3JxXjd+gQQ5P7foeKqzXZKIJr/OIBZWLZ9tW342zpH0GtDFn:Rhbbx3jPTdHtpOq9KI5mIPW4I2zrDFn

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  c171abbb15ded16a9bfb09ed5c53f78c_JaffaCakes118
- Size
  
  80KB
- MD5
  
  c171abbb15ded16a9bfb09ed5c53f78c
- SHA1
  
  d357bf4eeda19d2e1cdb15cb1594dfa3c55f750a
- SHA256
  
  a08dc439f87a1417472ba2a2d5248bc7d1784ad312cedec025ece713adb37847
- SHA512
  
  3175ccc31c1e87d818d17f39e01c06959ae237220498754fee564c237e14d683d0bf5f0d9de926aef9df865e03c11c9031ab8601faa7bd3b55fe1eba3488cf9c
- SSDEEP
  
  1536:hbhbAmm8x0UD3JxXjd+gQQ5P7foeKqzXZKIJr/OIBZWLZ9tW342zpH0GtDFn:Rhbbx3jPTdHtpOq9KI5mIPW4I2zrDFn
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2