56356867cf07b07f15a5ea33cfeb6812b7dc88d992d9ebe34ed97c1d727e0c25 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0474ed67a3be0736561b5ea3547a2cc7_JaffaCakes118
Size

14KB
Sample

241001-fn4zpssakj
MD5

0474ed67a3be0736561b5ea3547a2cc7
SHA1

888007ce56ab9d3ec2e58dbf960779a3c0fb7a19
SHA256

56356867cf07b07f15a5ea33cfeb6812b7dc88d992d9ebe34ed97c1d727e0c25
SHA512

1825e59a796cd4bc7355e2a8e7ad23d979ead7901a07158d4d0e087ca984c3b4d0ed4e99aef0caff15e24a64d67f42ad8909aa58582297d73a24cfb6a841b7ce
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4Yh8:hDXWipuE+K3/SSHgxW

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  0474ed67a3be0736561b5ea3547a2cc7_JaffaCakes118
- Size
  
  14KB
- MD5
  
  0474ed67a3be0736561b5ea3547a2cc7
- SHA1
  
  888007ce56ab9d3ec2e58dbf960779a3c0fb7a19
- SHA256
  
  56356867cf07b07f15a5ea33cfeb6812b7dc88d992d9ebe34ed97c1d727e0c25
- SHA512
  
  1825e59a796cd4bc7355e2a8e7ad23d979ead7901a07158d4d0e087ca984c3b4d0ed4e99aef0caff15e24a64d67f42ad8909aa58582297d73a24cfb6a841b7ce
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4Yh8:hDXWipuE+K3/SSHgxW
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2