cab49e7d4836d9ff879db002e8c7a6db6e4db55dc28aad214ad105fe9db899a5 | Triage

Sharing

General

Target

eac3d817ac090247defcef25452eee6e_JaffaCakes118
Size

473KB
Sample

240919-halx3svfjc
MD5

eac3d817ac090247defcef25452eee6e
SHA1

28c4b79ff185b10b8763a7567096e7da50ce359c
SHA256

cab49e7d4836d9ff879db002e8c7a6db6e4db55dc28aad214ad105fe9db899a5
SHA512

c5b9e171606a47c8dea7314b77682f35d1e4fc5ba687aeb40aaa4d0c69a60f9556750765416098ad85d6974a716e16cd9b254a7a349d47462b7cf6a26ecb95dc
SSDEEP

6144:kLpL3s3exN4SS4noP6QnoW89BUcLg6+u1+djiKkkS1POLL37zktY/9FQgaxFR:ip7sOxlnoP189Bh86+u1+4kS12cY/aPR

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  eac3d817ac090247defcef25452eee6e_JaffaCakes118
- Size
  
  473KB
- MD5
  
  eac3d817ac090247defcef25452eee6e
- SHA1
  
  28c4b79ff185b10b8763a7567096e7da50ce359c
- SHA256
  
  cab49e7d4836d9ff879db002e8c7a6db6e4db55dc28aad214ad105fe9db899a5
- SHA512
  
  c5b9e171606a47c8dea7314b77682f35d1e4fc5ba687aeb40aaa4d0c69a60f9556750765416098ad85d6974a716e16cd9b254a7a349d47462b7cf6a26ecb95dc
- SSDEEP
  
  6144:kLpL3s3exN4SS4noP6QnoW89BUcLg6+u1+djiKkkS1POLL37zktY/9FQgaxFR:ip7sOxlnoP189Bh86+u1+4kS12cY/aPR
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2