3b94c4ff570b9b1e844d2cafd7d03a9a4a309c036f88579b4bbc8dbbf374c6f5 | Triage

Sharing

General

Target

d7135a3eabb48a980639b412946f5b29_JaffaCakes118
Size

14KB
Sample

240909-zpgqca1gla
MD5

d7135a3eabb48a980639b412946f5b29
SHA1

252ca981287d2dbf738d0233b8db64ad6cdd6264
SHA256

3b94c4ff570b9b1e844d2cafd7d03a9a4a309c036f88579b4bbc8dbbf374c6f5
SHA512

765356a8033a4e495239d5c8b3c4e006b51cb53670ae80029117768be9557c18cbcf8f3cf77445812c6eb8697dfd5caabfed40d3fecabbdc499d732a27974c3c
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYlm:hDXWipuE+K3/SSHgxmlm

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d7135a3eabb48a980639b412946f5b29_JaffaCakes118
- Size
  
  14KB
- MD5
  
  d7135a3eabb48a980639b412946f5b29
- SHA1
  
  252ca981287d2dbf738d0233b8db64ad6cdd6264
- SHA256
  
  3b94c4ff570b9b1e844d2cafd7d03a9a4a309c036f88579b4bbc8dbbf374c6f5
- SHA512
  
  765356a8033a4e495239d5c8b3c4e006b51cb53670ae80029117768be9557c18cbcf8f3cf77445812c6eb8697dfd5caabfed40d3fecabbdc499d732a27974c3c
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYlm:hDXWipuE+K3/SSHgxmlm
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2