3f2652b41230d4aaaee7af7a63c1c50e573998224b67c213c71ecfa90dffe821 | Triage

Sharing

General

Target

e276a0d768c1427f2d479b4ed7c5c5ec_JaffaCakes118
Size

14KB
Sample

240915-pfvwhatglm
MD5

e276a0d768c1427f2d479b4ed7c5c5ec
SHA1

a44c40f6ea05536a2061e05fb4b206d817772d0f
SHA256

3f2652b41230d4aaaee7af7a63c1c50e573998224b67c213c71ecfa90dffe821
SHA512

875ab35d5aa0d371ffdc1a1cd5cd51e950cce0b31f382c1022ffd8d0f9411b232c188c4496dd0d651375ec678c637cbbfcd1df1a60d4a3a531dadcb413e1f475
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhY4h4:hDXWipuE+K3/SSHgxmP

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e276a0d768c1427f2d479b4ed7c5c5ec_JaffaCakes118
- Size
  
  14KB
- MD5
  
  e276a0d768c1427f2d479b4ed7c5c5ec
- SHA1
  
  a44c40f6ea05536a2061e05fb4b206d817772d0f
- SHA256
  
  3f2652b41230d4aaaee7af7a63c1c50e573998224b67c213c71ecfa90dffe821
- SHA512
  
  875ab35d5aa0d371ffdc1a1cd5cd51e950cce0b31f382c1022ffd8d0f9411b232c188c4496dd0d651375ec678c637cbbfcd1df1a60d4a3a531dadcb413e1f475
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhY4h4:hDXWipuE+K3/SSHgxmP
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2