07f1037b8d6650c8d4aedea072a2525a2cb5f40849fb43a86e2a6582f1aecc20 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d04aee33bdc7eaf81c434f60414e5f8f_JaffaCakes118
Size

256KB
Sample

240906-x3lv4stenr
MD5

d04aee33bdc7eaf81c434f60414e5f8f
SHA1

b51e61cfb36ba718e4af445d040de22f3a7c7392
SHA256

07f1037b8d6650c8d4aedea072a2525a2cb5f40849fb43a86e2a6582f1aecc20
SHA512

9cc0ab58699ee5c948adfc6923c22c1533ac63e8d7a13ed67070a07370c66a559b0131b09513df639c5a02221ae8ac336304d5d27d073165ab0c7da947357b22
SSDEEP

6144:+Gzf+/hOSZouvcOZvoZMZjnpWA5Gno3CK:HK/JRvNoZM1V3CK

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d04aee33bdc7eaf81c434f60414e5f8f_JaffaCakes118
- Size
  
  256KB
- MD5
  
  d04aee33bdc7eaf81c434f60414e5f8f
- SHA1
  
  b51e61cfb36ba718e4af445d040de22f3a7c7392
- SHA256
  
  07f1037b8d6650c8d4aedea072a2525a2cb5f40849fb43a86e2a6582f1aecc20
- SHA512
  
  9cc0ab58699ee5c948adfc6923c22c1533ac63e8d7a13ed67070a07370c66a559b0131b09513df639c5a02221ae8ac336304d5d27d073165ab0c7da947357b22
- SSDEEP
  
  6144:+Gzf+/hOSZouvcOZvoZMZjnpWA5Gno3CK:HK/JRvNoZM1V3CK
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2