a921edb508699087ce3c4553c3f634a56d60fb6f5efe405b5f22e7569cbaa83a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1c36d1db884a7b08092de2f36b4bfbf_JaffaCakes118
Size

14KB
Sample

240915-ft4k5axdmm
MD5

e1c36d1db884a7b08092de2f36b4bfbf
SHA1

14d5f182325b4ebc0813cd770d7d9d476d53e8f5
SHA256

a921edb508699087ce3c4553c3f634a56d60fb6f5efe405b5f22e7569cbaa83a
SHA512

1c995bf2ce2ae7a46cdda4718a9e9f1a000e5a579d9bd5d9611765fb4760481fa7762001d74f0af1a8bc624a918a2de61bda7bc30a666706e10d946cbbea2620
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhY7ZD:hDXWipuE+K3/SSHgxm7ZD

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e1c36d1db884a7b08092de2f36b4bfbf_JaffaCakes118
- Size
  
  14KB
- MD5
  
  e1c36d1db884a7b08092de2f36b4bfbf
- SHA1
  
  14d5f182325b4ebc0813cd770d7d9d476d53e8f5
- SHA256
  
  a921edb508699087ce3c4553c3f634a56d60fb6f5efe405b5f22e7569cbaa83a
- SHA512
  
  1c995bf2ce2ae7a46cdda4718a9e9f1a000e5a579d9bd5d9611765fb4760481fa7762001d74f0af1a8bc624a918a2de61bda7bc30a666706e10d946cbbea2620
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhY7ZD:hDXWipuE+K3/SSHgxm7ZD
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2