89c4b00d774614e0c7bee55703c21d3affe923394531adbc033015ebea564a8d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc738914c14525987ad5ec9d2c24a31a_JaffaCakes118
Size

14KB
Sample

240912-r6yq7azcna
MD5

dc738914c14525987ad5ec9d2c24a31a
SHA1

e5d2d480222f5093d73cbc5823d7a8430e3f190b
SHA256

89c4b00d774614e0c7bee55703c21d3affe923394531adbc033015ebea564a8d
SHA512

d182f6ee36bf02e64179ca1f3a8c5308eb167e2fa540a1aa4593b1b5107333201bba6ff15a90b224855c10f022cdfe1d6cd96fe1e199692aa7de3336b5295987
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhX:hDXWipuE+K3/SSHgx5

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  dc738914c14525987ad5ec9d2c24a31a_JaffaCakes118
- Size
  
  14KB
- MD5
  
  dc738914c14525987ad5ec9d2c24a31a
- SHA1
  
  e5d2d480222f5093d73cbc5823d7a8430e3f190b
- SHA256
  
  89c4b00d774614e0c7bee55703c21d3affe923394531adbc033015ebea564a8d
- SHA512
  
  d182f6ee36bf02e64179ca1f3a8c5308eb167e2fa540a1aa4593b1b5107333201bba6ff15a90b224855c10f022cdfe1d6cd96fe1e199692aa7de3336b5295987
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhX:hDXWipuE+K3/SSHgx5
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2