cef1e1dde22ff1030b26141dc486806be82a952a069c4ba1841339e0bab7c38f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef28ff1db1184f83a60f92d406a5f1b2_JaffaCakes118
Size

323KB
Sample

240921-gbwcgaxdrj
MD5

ef28ff1db1184f83a60f92d406a5f1b2
SHA1

936c890d9dafe2a43e69a68ec8a46b777cb57c4e
SHA256

cef1e1dde22ff1030b26141dc486806be82a952a069c4ba1841339e0bab7c38f
SHA512

a1dfc61672580883261f974e7b2512419a1429e646ed92735baf3e6b7b3f0ddc0cd5dc040941c26007e3d057a6ddb2d832030068c1bc22dd2bf629a731cd745c
SSDEEP

3072:ZomEu5tNKLIzOXmDiGgPEVRb2GDoaziQImNMLz9ZMBkgyMUn+qh6YqjWsXxbDrRF:ZKX0xiGg8cGxMX9A/zzzBbvzsw

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ef28ff1db1184f83a60f92d406a5f1b2_JaffaCakes118
- Size
  
  323KB
- MD5
  
  ef28ff1db1184f83a60f92d406a5f1b2
- SHA1
  
  936c890d9dafe2a43e69a68ec8a46b777cb57c4e
- SHA256
  
  cef1e1dde22ff1030b26141dc486806be82a952a069c4ba1841339e0bab7c38f
- SHA512
  
  a1dfc61672580883261f974e7b2512419a1429e646ed92735baf3e6b7b3f0ddc0cd5dc040941c26007e3d057a6ddb2d832030068c1bc22dd2bf629a731cd745c
- SSDEEP
  
  3072:ZomEu5tNKLIzOXmDiGgPEVRb2GDoaziQImNMLz9ZMBkgyMUn+qh6YqjWsXxbDrRF:ZKX0xiGg8cGxMX9A/zzzBbvzsw
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2