15c8dbd54b0cf0d2773ebdeec109665f782a3165ca38b225140063a076af4d48 | Triage

Sharing

General

Target

c800491694b1631d4819dd9e1deb7f4f_JaffaCakes118
Size

450KB
Sample

240829-bx5kdayenq
MD5

c800491694b1631d4819dd9e1deb7f4f
SHA1

776f700f23f657df647fe2555ef06314caee6ef4
SHA256

15c8dbd54b0cf0d2773ebdeec109665f782a3165ca38b225140063a076af4d48
SHA512

4a00085eb04ee699db7f8e01e5b2e4ef6ffd3f27c2c7d930dd4677876bf82993343ade1a40054123dbe2f0df42be0a8b4912282749037667548ba816cba7fe7d
SSDEEP

6144:EOoM2iSrUT2nTNtY/ccyuWblLt7p61e00p62YAPF3MG8rgw/gShgusEoY21:5mnTNtY/SVTye00o7A6G8kzShrsR1

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  c800491694b1631d4819dd9e1deb7f4f_JaffaCakes118
- Size
  
  450KB
- MD5
  
  c800491694b1631d4819dd9e1deb7f4f
- SHA1
  
  776f700f23f657df647fe2555ef06314caee6ef4
- SHA256
  
  15c8dbd54b0cf0d2773ebdeec109665f782a3165ca38b225140063a076af4d48
- SHA512
  
  4a00085eb04ee699db7f8e01e5b2e4ef6ffd3f27c2c7d930dd4677876bf82993343ade1a40054123dbe2f0df42be0a8b4912282749037667548ba816cba7fe7d
- SSDEEP
  
  6144:EOoM2iSrUT2nTNtY/ccyuWblLt7p61e00p62YAPF3MG8rgw/gShgusEoY21:5mnTNtY/SVTye00o7A6G8kzShrsR1
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2