5a8c08b46212a6d093e668b8ab1c9865e44271f93721c16d16ef3f5914368b37 | Triage

Sharing

General

Target

fce11fe00c541c477e913d62d6660093_JaffaCakes118
Size

111KB
Sample

240928-wyafvazarn
MD5

fce11fe00c541c477e913d62d6660093
SHA1

3bbf8911041e5c704a62b8a0ccba68b12cf9e218
SHA256

5a8c08b46212a6d093e668b8ab1c9865e44271f93721c16d16ef3f5914368b37
SHA512

c457691352610b424ea06970f9c3b0b910084ab27425bbf32d262297b901635947ae0104621c16c28c9b68b11834015dd41942e7c73e9e6f1a6610b21b5b82f6
SSDEEP

3072:P05+R+upctLk8uoslG4tOwGvYRngHRrm40y9Nfw:P05UZpcBZslG4wvYRgHR9ZY

Score

8^/10

discovery

Malware Config

Targets

- Target
  
  fce11fe00c541c477e913d62d6660093_JaffaCakes118
- Size
  
  111KB
- MD5
  
  fce11fe00c541c477e913d62d6660093
- SHA1
  
  3bbf8911041e5c704a62b8a0ccba68b12cf9e218
- SHA256
  
  5a8c08b46212a6d093e668b8ab1c9865e44271f93721c16d16ef3f5914368b37
- SHA512
  
  c457691352610b424ea06970f9c3b0b910084ab27425bbf32d262297b901635947ae0104621c16c28c9b68b11834015dd41942e7c73e9e6f1a6610b21b5b82f6
- SSDEEP
  
  3072:P05+R+upctLk8uoslG4tOwGvYRngHRrm40y9Nfw:P05UZpcBZslG4wvYRgHR9ZY
Score

8^/10

discovery
- Drops file in Drivers directory
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2