6056042f7fdc7702776bcbab138f8dcb72ba518eb8ba26bcff1f2030037b7904 | Triage

Sharing

General

Target

fa0b8d956d01dcd694e9d1e481d726f8_JaffaCakes118
Size

47KB
Sample

240927-j5devswcpe
MD5

fa0b8d956d01dcd694e9d1e481d726f8
SHA1

31291ad6fbc90573eb88579db0420f215f2ba87d
SHA256

6056042f7fdc7702776bcbab138f8dcb72ba518eb8ba26bcff1f2030037b7904
SHA512

4d107ba13dd2c18accb5a76e026630689c3deb05b81a56a264b37f2dd7676fd7ce1107fc0c67de91dfbbdcd0fa104e9bdeaae6234a9a8b7dfe9321afb82dcf03
SSDEEP

768:/lDgqmkQrIWbmXiMVMOAEsa7MnbNCyUHDkXqs4B3MjMndteIj80c6qkx/deVI:9Ek3WyXd1hsuMnBCFjkaa4dUId1l9

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  fa0b8d956d01dcd694e9d1e481d726f8_JaffaCakes118
- Size
  
  47KB
- MD5
  
  fa0b8d956d01dcd694e9d1e481d726f8
- SHA1
  
  31291ad6fbc90573eb88579db0420f215f2ba87d
- SHA256
  
  6056042f7fdc7702776bcbab138f8dcb72ba518eb8ba26bcff1f2030037b7904
- SHA512
  
  4d107ba13dd2c18accb5a76e026630689c3deb05b81a56a264b37f2dd7676fd7ce1107fc0c67de91dfbbdcd0fa104e9bdeaae6234a9a8b7dfe9321afb82dcf03
- SSDEEP
  
  768:/lDgqmkQrIWbmXiMVMOAEsa7MnbNCyUHDkXqs4B3MjMndteIj80c6qkx/deVI:9Ek3WyXd1hsuMnBCFjkaa4dUId1l9
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2