d6561c2e624739bea824f79b1530737945cc5d4feb8455816420d000184b60ad | Triage

Sharing

General

Target

dc2f59de5c5f5b0cd4766aea86d3a5e3_JaffaCakes118
Size

130KB
Sample

240912-l3lpka1gmb
MD5

dc2f59de5c5f5b0cd4766aea86d3a5e3
SHA1

2eb23ed0f3bcebd4634a868b3971ac48bcb6aea0
SHA256

d6561c2e624739bea824f79b1530737945cc5d4feb8455816420d000184b60ad
SHA512

f68c6e1310777a37e1b3ff490ba790ad6a39f40b99df9e62f43b6f3437b1e611610517d43663f0a586094a4307b031134c57f535cb3a6e7dff4651f38ad2aeaa
SSDEEP

3072:Q6DvC3rYnl6KkHlMyr1CFIXTiYQlz5xDddPOQIl8QP1s:Q6DvBXVg1CYCPxdPclPds

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  dc2f59de5c5f5b0cd4766aea86d3a5e3_JaffaCakes118
- Size
  
  130KB
- MD5
  
  dc2f59de5c5f5b0cd4766aea86d3a5e3
- SHA1
  
  2eb23ed0f3bcebd4634a868b3971ac48bcb6aea0
- SHA256
  
  d6561c2e624739bea824f79b1530737945cc5d4feb8455816420d000184b60ad
- SHA512
  
  f68c6e1310777a37e1b3ff490ba790ad6a39f40b99df9e62f43b6f3437b1e611610517d43663f0a586094a4307b031134c57f535cb3a6e7dff4651f38ad2aeaa
- SSDEEP
  
  3072:Q6DvC3rYnl6KkHlMyr1CFIXTiYQlz5xDddPOQIl8QP1s:Q6DvBXVg1CYCPxdPclPds
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2