122f58ee576e218087563b2e7010a2cb0324b1c9eb04946773f0e8c96f90fb45 | Triage

Sharing

General

Target

27a289531660a32c1cec535bee86e28d_JaffaCakes118
Size

14KB
Sample

241009-annptsxbje
MD5

27a289531660a32c1cec535bee86e28d
SHA1

4abcbd17dfd0731031f31f40475dab345ff70b9c
SHA256

122f58ee576e218087563b2e7010a2cb0324b1c9eb04946773f0e8c96f90fb45
SHA512

47d08df47bd013a0074c8dd062c22145820bec02cdf47b37de237b4eb2c6c7306de96e66355afc4cf0a42e41232b2fa0dc1c46bacaef212787c030fabe9124b0
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4Yhv56:hDXWipuE+K3/SSHgxl56

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  27a289531660a32c1cec535bee86e28d_JaffaCakes118
- Size
  
  14KB
- MD5
  
  27a289531660a32c1cec535bee86e28d
- SHA1
  
  4abcbd17dfd0731031f31f40475dab345ff70b9c
- SHA256
  
  122f58ee576e218087563b2e7010a2cb0324b1c9eb04946773f0e8c96f90fb45
- SHA512
  
  47d08df47bd013a0074c8dd062c22145820bec02cdf47b37de237b4eb2c6c7306de96e66355afc4cf0a42e41232b2fa0dc1c46bacaef212787c030fabe9124b0
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4Yhv56:hDXWipuE+K3/SSHgxl56
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2