deaa174c15bde0294a4f092087f615b02852d545b0cc5ec1b12266d26c1b0c66 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ae9c3ca2a5bc0e355eba6f258f79c2f_JaffaCakes118
Size

809KB
Sample

241002-qv17haydlj
MD5

0ae9c3ca2a5bc0e355eba6f258f79c2f
SHA1

ec93666ed31d98c4db2d8ebf9bd84539e8564bff
SHA256

deaa174c15bde0294a4f092087f615b02852d545b0cc5ec1b12266d26c1b0c66
SHA512

bfabfe4152a6a9b723ad0e4d23f4604f89d78309634e27120fd984f8647bc38abd2b2e7d741bcb3fb531ea80eb97e1750c0faef184779565d5a1be8a7af98557
SSDEEP

12288:kGz5971uu6q99/KqkNwdJ+0bAbRNNcd09dajXqShJaRuBcSc49onVY848JgUONvx:/99SqKwd7AZAVWYBcSb9kVF4A2

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  0ae9c3ca2a5bc0e355eba6f258f79c2f_JaffaCakes118
- Size
  
  809KB
- MD5
  
  0ae9c3ca2a5bc0e355eba6f258f79c2f
- SHA1
  
  ec93666ed31d98c4db2d8ebf9bd84539e8564bff
- SHA256
  
  deaa174c15bde0294a4f092087f615b02852d545b0cc5ec1b12266d26c1b0c66
- SHA512
  
  bfabfe4152a6a9b723ad0e4d23f4604f89d78309634e27120fd984f8647bc38abd2b2e7d741bcb3fb531ea80eb97e1750c0faef184779565d5a1be8a7af98557
- SSDEEP
  
  12288:kGz5971uu6q99/KqkNwdJ+0bAbRNNcd09dajXqShJaRuBcSc49onVY848JgUONvx:/99SqKwd7AZAVWYBcSb9kVF4A2
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2