64480c0fa7fbc494f0cc69ecf45195e27ba5ebfec7c46f273db30ba11ea4c4c9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d10e3cf1d8bc70131f67d4a601380e8a_JaffaCakes118
Size

14KB
Sample

240907-evy7csvalm
MD5

d10e3cf1d8bc70131f67d4a601380e8a
SHA1

0a99261777e82fdcc94cd0754b530d8414f1cb17
SHA256

64480c0fa7fbc494f0cc69ecf45195e27ba5ebfec7c46f273db30ba11ea4c4c9
SHA512

33ba5ee89e87ffe58f1fd59eaf96be382d57474912665e446f071fb89d44194cbb959fe0a4377dc0bd80e53d75bb0f527b8e4b83a4cecf2c92a456ab435133f9
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhY5Q:hDXWipuE+K3/SSHgxmi

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d10e3cf1d8bc70131f67d4a601380e8a_JaffaCakes118
- Size
  
  14KB
- MD5
  
  d10e3cf1d8bc70131f67d4a601380e8a
- SHA1
  
  0a99261777e82fdcc94cd0754b530d8414f1cb17
- SHA256
  
  64480c0fa7fbc494f0cc69ecf45195e27ba5ebfec7c46f273db30ba11ea4c4c9
- SHA512
  
  33ba5ee89e87ffe58f1fd59eaf96be382d57474912665e446f071fb89d44194cbb959fe0a4377dc0bd80e53d75bb0f527b8e4b83a4cecf2c92a456ab435133f9
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhY5Q:hDXWipuE+K3/SSHgxmi
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2