fed2da083442648e0ab6ca143a5163ae1113a00b73920b41dc07440e3b6a4ad5 | Triage

Sharing

General

Target

278fa4957e7ee87a33fddb1be29791ff_JaffaCakes118
Size

42KB
Sample

241009-ajs4rawfqd
MD5

278fa4957e7ee87a33fddb1be29791ff
SHA1

1094f4dbd8fc077eeba6986018dd17cefaf92252
SHA256

fed2da083442648e0ab6ca143a5163ae1113a00b73920b41dc07440e3b6a4ad5
SHA512

f64d0b146d159fdebff1ab814d4c5abeb94dad62b4706e71996708e4829cb913ac1ee42f0590ca70094a1bd94262f1d4c3998e96f002d6f15305cc953cdbfeb3
SSDEEP

768:rppWsMo8MeEDVWkcQjfiLzP674J52B7X07OJbzdXoiPgtPErj6owlcKe:rruoMLiaLzY4J247ONdfgw6jlj

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  278fa4957e7ee87a33fddb1be29791ff_JaffaCakes118
- Size
  
  42KB
- MD5
  
  278fa4957e7ee87a33fddb1be29791ff
- SHA1
  
  1094f4dbd8fc077eeba6986018dd17cefaf92252
- SHA256
  
  fed2da083442648e0ab6ca143a5163ae1113a00b73920b41dc07440e3b6a4ad5
- SHA512
  
  f64d0b146d159fdebff1ab814d4c5abeb94dad62b4706e71996708e4829cb913ac1ee42f0590ca70094a1bd94262f1d4c3998e96f002d6f15305cc953cdbfeb3
- SSDEEP
  
  768:rppWsMo8MeEDVWkcQjfiLzP674J52B7X07OJbzdXoiPgtPErj6owlcKe:rruoMLiaLzY4J247ONdfgw6jlj
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2