3f854ce008a01984333c517f9c04f8c6ec9dd12fa2d4e1bd72c73409220ee47b | Triage

Sharing

General

Target

d334ea90cbebc979ab607ff4b08aabe2_JaffaCakes118
Size

578KB
Sample

240908-bjfdbsybjf
MD5

d334ea90cbebc979ab607ff4b08aabe2
SHA1

fda1e4b0f7460806edf5f405b08af2618be5db0d
SHA256

3f854ce008a01984333c517f9c04f8c6ec9dd12fa2d4e1bd72c73409220ee47b
SHA512

86c9557efea35498e1d32221e0306c21da70432fe2e32fcddeb1ee9927eb754b3104932a9928f5d4a1cf5e24a4dbbf55aaefd051a6dc67b4e6992749e0a99c28
SSDEEP

12288:WybTTsjZIs4nPRENOO4uBojmG7H1CjAjG7bca31+MSwvNmqfc1K0yi:WybTAipD32wj0ounUcvNMU0

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d334ea90cbebc979ab607ff4b08aabe2_JaffaCakes118
- Size
  
  578KB
- MD5
  
  d334ea90cbebc979ab607ff4b08aabe2
- SHA1
  
  fda1e4b0f7460806edf5f405b08af2618be5db0d
- SHA256
  
  3f854ce008a01984333c517f9c04f8c6ec9dd12fa2d4e1bd72c73409220ee47b
- SHA512
  
  86c9557efea35498e1d32221e0306c21da70432fe2e32fcddeb1ee9927eb754b3104932a9928f5d4a1cf5e24a4dbbf55aaefd051a6dc67b4e6992749e0a99c28
- SSDEEP
  
  12288:WybTTsjZIs4nPRENOO4uBojmG7H1CjAjG7bca31+MSwvNmqfc1K0yi:WybTAipD32wj0ounUcvNMU0
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Use of msiexec (install) with remote resource
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2