0cd8b17ced5bf545217511a8f495e242d11693337e303e7325f15ec8a967f384 | Triage

Sharing

General

Target

ead087d71c15d6932b9c220e81f99c44_JaffaCakes118
Size

340KB
Sample

240919-hwe2nawepe
MD5

ead087d71c15d6932b9c220e81f99c44
SHA1

295a8f3d8f06175113a848779c9b31a939aa1e97
SHA256

0cd8b17ced5bf545217511a8f495e242d11693337e303e7325f15ec8a967f384
SHA512

d3c2d13c53a1c1e732290db76e191bde06ce315c8a4cb16531d90e87e51c29417c46f04aa461e308fd59a57e77bd448732cdb8d6a522b3179d3dbd4ffef46792
SSDEEP

3072:H99vdvoskP+15fqUP+qiV58O7N8nmcKG1GUXu7nOCtf3D5ZourNMqLC08ffVIWWT:djfflWp4znRKCLuXxvrsd9WiwHHo3p

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ead087d71c15d6932b9c220e81f99c44_JaffaCakes118
- Size
  
  340KB
- MD5
  
  ead087d71c15d6932b9c220e81f99c44
- SHA1
  
  295a8f3d8f06175113a848779c9b31a939aa1e97
- SHA256
  
  0cd8b17ced5bf545217511a8f495e242d11693337e303e7325f15ec8a967f384
- SHA512
  
  d3c2d13c53a1c1e732290db76e191bde06ce315c8a4cb16531d90e87e51c29417c46f04aa461e308fd59a57e77bd448732cdb8d6a522b3179d3dbd4ffef46792
- SSDEEP
  
  3072:H99vdvoskP+15fqUP+qiV58O7N8nmcKG1GUXu7nOCtf3D5ZourNMqLC08ffVIWWT:djfflWp4znRKCLuXxvrsd9WiwHHo3p
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2