d41dadafa8222349dea80cef5c3455258a7a4f3ee9c1503952565daedf98ef05 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01014541c6ac4abd4560f100d41f4560_JaffaCakes118
Size

15KB
Sample

240930-m8wbmawemf
MD5

01014541c6ac4abd4560f100d41f4560
SHA1

e2b2cf33666fcbaeda0c0b31dc0c944a0b930154
SHA256

d41dadafa8222349dea80cef5c3455258a7a4f3ee9c1503952565daedf98ef05
SHA512

adc7e1ca321d07a84d786ebadb688aa26baba29ab5e1d69549ec0eddb77e201d8abe6a9795cf7a6c58ad066c8ce9194271f25db2d79603fad2205a5ef7d27b3b
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYQMx8:hDXWipuE+K3/SSHgxmHu

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  01014541c6ac4abd4560f100d41f4560_JaffaCakes118
- Size
  
  15KB
- MD5
  
  01014541c6ac4abd4560f100d41f4560
- SHA1
  
  e2b2cf33666fcbaeda0c0b31dc0c944a0b930154
- SHA256
  
  d41dadafa8222349dea80cef5c3455258a7a4f3ee9c1503952565daedf98ef05
- SHA512
  
  adc7e1ca321d07a84d786ebadb688aa26baba29ab5e1d69549ec0eddb77e201d8abe6a9795cf7a6c58ad066c8ce9194271f25db2d79603fad2205a5ef7d27b3b
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYQMx8:hDXWipuE+K3/SSHgxmHu
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2