d0059ce0bf8149f1cd5c16a9c032df4df884bbfc561e7bac4ed0b2a74fc5c979 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9f041bde42c78d073ae8bb768c27f1c_JaffaCakes118
Size

91KB
Sample

240927-hphh7szgpq
MD5

f9f041bde42c78d073ae8bb768c27f1c
SHA1

2d2169682bfd9568ff8c46317af96fa94ece5439
SHA256

d0059ce0bf8149f1cd5c16a9c032df4df884bbfc561e7bac4ed0b2a74fc5c979
SHA512

f270fd9bb7010c1976aa02dbdd31c72bb2be0459c6c992a6bacc5f1a41f4ec670fe60da8d877cbd74a81a948fead6cd2cb7ef39240db53c11085022b624414b1
SSDEEP

1536:ZyaBx9aROUurva3SPceOBtG7HpoI1mn93E3T7yk1I9Z/bZaRcEVagkMdn99Ed:ZyGEqr19z7bklECk1IxaRcEwSdfc

Score

7^/10

aspackv2 discovery

Malware Config

Targets

- Target
  
  f9f041bde42c78d073ae8bb768c27f1c_JaffaCakes118
- Size
  
  91KB
- MD5
  
  f9f041bde42c78d073ae8bb768c27f1c
- SHA1
  
  2d2169682bfd9568ff8c46317af96fa94ece5439
- SHA256
  
  d0059ce0bf8149f1cd5c16a9c032df4df884bbfc561e7bac4ed0b2a74fc5c979
- SHA512
  
  f270fd9bb7010c1976aa02dbdd31c72bb2be0459c6c992a6bacc5f1a41f4ec670fe60da8d877cbd74a81a948fead6cd2cb7ef39240db53c11085022b624414b1
- SSDEEP
  
  1536:ZyaBx9aROUurva3SPceOBtG7HpoI1mn93E3T7yk1I9Z/bZaRcEVagkMdn99Ed:ZyGEqr19z7bklECk1IxaRcEwSdfc
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2