efedbd226b293f773ddad70155e5596a91ed501d65bacf6a78c7a38d8b4a46e3 | Triage

Sharing

General

Target

fe03c9cd24f5b913a3ad5e732a86c7dc_JaffaCakes118
Size

15KB
Sample

240929-hvbylswhlg
MD5

fe03c9cd24f5b913a3ad5e732a86c7dc
SHA1

e803f9bce447000181095db7a5c4bdb6107be2af
SHA256

efedbd226b293f773ddad70155e5596a91ed501d65bacf6a78c7a38d8b4a46e3
SHA512

44b42fdd61f490d781b9ce5942d351a613bf9ae6dab7d2cb03c7cd160177ef7c18f9712adbcbdce740e26e04e89ea4e7380395e6840f98c2a9178425b56e9358
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhJEHt:hDXWipuE+K3/SSHgxWt

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  fe03c9cd24f5b913a3ad5e732a86c7dc_JaffaCakes118
- Size
  
  15KB
- MD5
  
  fe03c9cd24f5b913a3ad5e732a86c7dc
- SHA1
  
  e803f9bce447000181095db7a5c4bdb6107be2af
- SHA256
  
  efedbd226b293f773ddad70155e5596a91ed501d65bacf6a78c7a38d8b4a46e3
- SHA512
  
  44b42fdd61f490d781b9ce5942d351a613bf9ae6dab7d2cb03c7cd160177ef7c18f9712adbcbdce740e26e04e89ea4e7380395e6840f98c2a9178425b56e9358
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhJEHt:hDXWipuE+K3/SSHgxWt
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2