69aa7cb2fc37fe833a5219bc3b4f15992b4cb6d55cb1a370d898d1fed71d5ba2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ff392b8cc7e96ae49a9bc4876da3e42_JaffaCakes118
Size

680KB
Sample

241003-wgbmkssbnc
MD5

0ff392b8cc7e96ae49a9bc4876da3e42
SHA1

15bdf702b71f7f37a15474be324fbcb0e3eb9628
SHA256

69aa7cb2fc37fe833a5219bc3b4f15992b4cb6d55cb1a370d898d1fed71d5ba2
SHA512

9b20a66dd505d89dec8138be7f88cdcc9bd4080605c59d85a6d61f13ee887dee235dceee44b0042187680f5df5755c20fa8a768c59deace8f106a61d3085b14a
SSDEEP

12288:fGcoXCUUZftSTrISC/icGlCME5D2Ah9TGJrX30GIcEhrDlYXC2YJ2vn:xadQSDFlCzzLTGJ4G+4Yu

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  0ff392b8cc7e96ae49a9bc4876da3e42_JaffaCakes118
- Size
  
  680KB
- MD5
  
  0ff392b8cc7e96ae49a9bc4876da3e42
- SHA1
  
  15bdf702b71f7f37a15474be324fbcb0e3eb9628
- SHA256
  
  69aa7cb2fc37fe833a5219bc3b4f15992b4cb6d55cb1a370d898d1fed71d5ba2
- SHA512
  
  9b20a66dd505d89dec8138be7f88cdcc9bd4080605c59d85a6d61f13ee887dee235dceee44b0042187680f5df5755c20fa8a768c59deace8f106a61d3085b14a
- SSDEEP
  
  12288:fGcoXCUUZftSTrISC/icGlCME5D2Ah9TGJrX30GIcEhrDlYXC2YJ2vn:xadQSDFlCzzLTGJ4G+4Yu
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2