3e23581b35e23b841bd4f9c1c85507807f9becedf6a0a5dc99519cf9b1c2ad22 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07359517ba46b6b3524ce0c9ca0581d0_JaffaCakes118
Size

200KB
Sample

241001-yqe3ga1glc
MD5

07359517ba46b6b3524ce0c9ca0581d0
SHA1

952a0a9fdcb3edbceae6368b14b65294e2b39199
SHA256

3e23581b35e23b841bd4f9c1c85507807f9becedf6a0a5dc99519cf9b1c2ad22
SHA512

3c829209e9a3e5886f6ceca81c0ec2634a99c867ac55fb0e8b8cbfd1390503b71ef38a829b381b525719662958637bafecff847fec4cca6c0c5628d6dc32c8b7
SSDEEP

3072:XaNNxA3y4CpCfCGCCOCwC9CvCFCfCLCvCUCLC2FInROUSRSGSuSQSmSNS4SQSsSx:uLA3yGFInRO

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  07359517ba46b6b3524ce0c9ca0581d0_JaffaCakes118
- Size
  
  200KB
- MD5
  
  07359517ba46b6b3524ce0c9ca0581d0
- SHA1
  
  952a0a9fdcb3edbceae6368b14b65294e2b39199
- SHA256
  
  3e23581b35e23b841bd4f9c1c85507807f9becedf6a0a5dc99519cf9b1c2ad22
- SHA512
  
  3c829209e9a3e5886f6ceca81c0ec2634a99c867ac55fb0e8b8cbfd1390503b71ef38a829b381b525719662958637bafecff847fec4cca6c0c5628d6dc32c8b7
- SSDEEP
  
  3072:XaNNxA3y4CpCfCGCCOCwC9CvCFCfCLCvCUCLC2FInROUSRSGSuSQSmSNS4SQSsSx:uLA3yGFInRO
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2