638d42c4cb160a6a48a2e71fca2389bb2c731c425f799edae06cdcb2473dba8f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11f94b3ddf1c894ba33e17bd2e224b5b_JaffaCakes118
Size

14KB
Sample

241004-fvr9gszfnc
MD5

11f94b3ddf1c894ba33e17bd2e224b5b
SHA1

e6dbd464f432724b548b8fd5cb83f9fa367f10ff
SHA256

638d42c4cb160a6a48a2e71fca2389bb2c731c425f799edae06cdcb2473dba8f
SHA512

6e7919bcb8e566a12a4a1a88a44c47532c55c885b4a4e4064dc37bcda9ee487258f85128f84d65d8b9bfe2fa7a518de16d5d5c6aca6d92c092c8b12d8cd669e7
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhY4hV:hDXWipuE+K3/SSHgxmm

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  11f94b3ddf1c894ba33e17bd2e224b5b_JaffaCakes118
- Size
  
  14KB
- MD5
  
  11f94b3ddf1c894ba33e17bd2e224b5b
- SHA1
  
  e6dbd464f432724b548b8fd5cb83f9fa367f10ff
- SHA256
  
  638d42c4cb160a6a48a2e71fca2389bb2c731c425f799edae06cdcb2473dba8f
- SHA512
  
  6e7919bcb8e566a12a4a1a88a44c47532c55c885b4a4e4064dc37bcda9ee487258f85128f84d65d8b9bfe2fa7a518de16d5d5c6aca6d92c092c8b12d8cd669e7
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhY4hV:hDXWipuE+K3/SSHgxmm
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2