77aa895fad29e58a2e9cefbf755cfd8fc82773af4ec358e465f71290cf31e40f | Triage

Sharing

General

Target

dcc8b07bc2bc9dbe8f73f9f36837bcd3_JaffaCakes118
Size

2.5MB
Sample

240912-wvh9ksxbrm
MD5

dcc8b07bc2bc9dbe8f73f9f36837bcd3
SHA1

2781530d05ed2eb704649ac519f0853d0977cf01
SHA256

77aa895fad29e58a2e9cefbf755cfd8fc82773af4ec358e465f71290cf31e40f
SHA512

770bf835ed8726313e4f656d1148d1e73cf2431350cf032c2539635cb424d9d31d189ee774ba80a0a8cce1b94433665e7e75227824f218352c0eff2911954ec2
SSDEEP

49152:oky796EvMtTx435MtV+Oj29Ls3t/cwCxHHlc2KP1z8o/MO2Uqed3yBI1r4:o7AEvgVOy29Ls3JslVYzjMO26ip

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  dcc8b07bc2bc9dbe8f73f9f36837bcd3_JaffaCakes118
- Size
  
  2.5MB
- MD5
  
  dcc8b07bc2bc9dbe8f73f9f36837bcd3
- SHA1
  
  2781530d05ed2eb704649ac519f0853d0977cf01
- SHA256
  
  77aa895fad29e58a2e9cefbf755cfd8fc82773af4ec358e465f71290cf31e40f
- SHA512
  
  770bf835ed8726313e4f656d1148d1e73cf2431350cf032c2539635cb424d9d31d189ee774ba80a0a8cce1b94433665e7e75227824f218352c0eff2911954ec2
- SSDEEP
  
  49152:oky796EvMtTx435MtV+Oj29Ls3t/cwCxHHlc2KP1z8o/MO2Uqed3yBI1r4:o7AEvgVOy29Ls3JslVYzjMO26ip
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2