058a589ca4487966b442d4f4f8c9209164bfdd79cf41c32f204312fcc730e143 | Triage

Sharing

General

Target

dcaeaa8142662e8bbf296baef7236f2d_JaffaCakes118
Size

341KB
Sample

240912-vqmwjavfkc
MD5

dcaeaa8142662e8bbf296baef7236f2d
SHA1

d326084e64b81ee2f307d3f327b3e7c824af01c4
SHA256

058a589ca4487966b442d4f4f8c9209164bfdd79cf41c32f204312fcc730e143
SHA512

53c4b0312171e822c018cd75209ffe75110421033f57bd36fa4d442f80ea4f97033b16b7a6aba8e6e864e1341c6b57cc17dba86ef0f383b17fdc271cd0356385
SSDEEP

6144:1TBhHPXmcZ/Lbii5bkgVuN+xSKV7Wkrsf7LsA0RrRNPdikynEY:19hvXmcdXikbkgaISKVg0RrRNP4jnEY

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  dcaeaa8142662e8bbf296baef7236f2d_JaffaCakes118
- Size
  
  341KB
- MD5
  
  dcaeaa8142662e8bbf296baef7236f2d
- SHA1
  
  d326084e64b81ee2f307d3f327b3e7c824af01c4
- SHA256
  
  058a589ca4487966b442d4f4f8c9209164bfdd79cf41c32f204312fcc730e143
- SHA512
  
  53c4b0312171e822c018cd75209ffe75110421033f57bd36fa4d442f80ea4f97033b16b7a6aba8e6e864e1341c6b57cc17dba86ef0f383b17fdc271cd0356385
- SSDEEP
  
  6144:1TBhHPXmcZ/Lbii5bkgVuN+xSKV7Wkrsf7LsA0RrRNPdikynEY:19hvXmcdXikbkgaISKVg0RrRNP4jnEY
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2