0041108a36cd2ca93f35479afb376b9a8cc2b9f6a17bc1bab264e382dc4533be | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa95731160587b4fac6fe788048655b6_JaffaCakes118
Size

20KB
Sample

240927-ryq2dazbra
MD5

fa95731160587b4fac6fe788048655b6
SHA1

acc8eac7c6c3a507d2e9232cba2aff644107052c
SHA256

0041108a36cd2ca93f35479afb376b9a8cc2b9f6a17bc1bab264e382dc4533be
SHA512

005fb817dcc0eda23a168e1912cd3fac87f35fbaacc536123a1b07b9848006a585ef1a509093a3dc14ee47b4d881bdb35dff5a5925cbb161c49e21ba4516d569
SSDEEP

384:S5iz0XUWetdl4U6ElfsFNkxWpSWmpknhu1jKnv7D3y:S5iIXP4vlfsF5Smu1jKvC

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  fa95731160587b4fac6fe788048655b6_JaffaCakes118
- Size
  
  20KB
- MD5
  
  fa95731160587b4fac6fe788048655b6
- SHA1
  
  acc8eac7c6c3a507d2e9232cba2aff644107052c
- SHA256
  
  0041108a36cd2ca93f35479afb376b9a8cc2b9f6a17bc1bab264e382dc4533be
- SHA512
  
  005fb817dcc0eda23a168e1912cd3fac87f35fbaacc536123a1b07b9848006a585ef1a509093a3dc14ee47b4d881bdb35dff5a5925cbb161c49e21ba4516d569
- SSDEEP
  
  384:S5iz0XUWetdl4U6ElfsFNkxWpSWmpknhu1jKnv7D3y:S5iIXP4vlfsF5Smu1jKvC
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2