beff6663477809d0d4396b7324315ab4347bcc3a589dc8159065469d97a113e5 | Triage

Sharing

General

Target

d08cb2d1c9ac7ca15a3cf22fa3e4c8c9_JaffaCakes118
Size

15KB
Sample

240906-14bnbazhlj
MD5

d08cb2d1c9ac7ca15a3cf22fa3e4c8c9
SHA1

7e4983d30e8ea2262c3b5a93c94a206aa9390a95
SHA256

beff6663477809d0d4396b7324315ab4347bcc3a589dc8159065469d97a113e5
SHA512

35cfeaa39a5594dc7f7f591e8768d9aab90b2b3add285392e01a98fc09e480f76a2f238e21bb2190b312e34ad560bd97d83eb7a163d3eaed3950a80afbddb899
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYKB2Hc:hDXWipuE+K3/SSHgxmKE8

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d08cb2d1c9ac7ca15a3cf22fa3e4c8c9_JaffaCakes118
- Size
  
  15KB
- MD5
  
  d08cb2d1c9ac7ca15a3cf22fa3e4c8c9
- SHA1
  
  7e4983d30e8ea2262c3b5a93c94a206aa9390a95
- SHA256
  
  beff6663477809d0d4396b7324315ab4347bcc3a589dc8159065469d97a113e5
- SHA512
  
  35cfeaa39a5594dc7f7f591e8768d9aab90b2b3add285392e01a98fc09e480f76a2f238e21bb2190b312e34ad560bd97d83eb7a163d3eaed3950a80afbddb899
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYKB2Hc:hDXWipuE+K3/SSHgxmKE8
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2