5e6ab6edfa5faa86458d5f92fdd3f70f5ca34643ecc8a77f6cdbc007cf2162b0 | Triage

Sharing

General

Target

2b45d306748783877e2f062672373e6d_JaffaCakes118
Size

14KB
Sample

241009-fmapgazfkp
MD5

2b45d306748783877e2f062672373e6d
SHA1

f53e55804eee1806514078c92b0693e5e710b10d
SHA256

5e6ab6edfa5faa86458d5f92fdd3f70f5ca34643ecc8a77f6cdbc007cf2162b0
SHA512

7c19aacbd64d2d57900d7f2c54949aab88e670affa26e8f84276738dd9d91d0e917e269b3fcbe581064eef0311948ea51437d91e069a9d6f8cb2307b7b3f1c80
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4Yhf:hDXWipuE+K3/SSHgxh

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2b45d306748783877e2f062672373e6d_JaffaCakes118
- Size
  
  14KB
- MD5
  
  2b45d306748783877e2f062672373e6d
- SHA1
  
  f53e55804eee1806514078c92b0693e5e710b10d
- SHA256
  
  5e6ab6edfa5faa86458d5f92fdd3f70f5ca34643ecc8a77f6cdbc007cf2162b0
- SHA512
  
  7c19aacbd64d2d57900d7f2c54949aab88e670affa26e8f84276738dd9d91d0e917e269b3fcbe581064eef0311948ea51437d91e069a9d6f8cb2307b7b3f1c80
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4Yhf:hDXWipuE+K3/SSHgxh
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2