b3f7cf0373dd448b4bbd47d1bc21ca470697faa12053e061d873101b865ba761 | Triage

Sharing

General

Target

eac55a7dba53a3ca40b4c83a7fcf4923_JaffaCakes118
Size

15KB
Sample

240919-hcxglavgje
MD5

eac55a7dba53a3ca40b4c83a7fcf4923
SHA1

bb3100a8d6ac07b8a5e4969853736b0dad511713
SHA256

b3f7cf0373dd448b4bbd47d1bc21ca470697faa12053e061d873101b865ba761
SHA512

18b582f04dc863686abedb8c764ee9811d4dac8352cf4e9f72f719eeb956535d1732eeb1ae620b0a33450e8942f982e48b7548ccdbdc3a8bddb04bfc4ec1e118
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYll:hDXWipuE+K3/SSHgxmll

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  eac55a7dba53a3ca40b4c83a7fcf4923_JaffaCakes118
- Size
  
  15KB
- MD5
  
  eac55a7dba53a3ca40b4c83a7fcf4923
- SHA1
  
  bb3100a8d6ac07b8a5e4969853736b0dad511713
- SHA256
  
  b3f7cf0373dd448b4bbd47d1bc21ca470697faa12053e061d873101b865ba761
- SHA512
  
  18b582f04dc863686abedb8c764ee9811d4dac8352cf4e9f72f719eeb956535d1732eeb1ae620b0a33450e8942f982e48b7548ccdbdc3a8bddb04bfc4ec1e118
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYll:hDXWipuE+K3/SSHgxmll
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2