fd2f3f0f7c90d07e96d7fb80d79f51e8b81de745839f331a6a42ebb9b410473a | Triage

Sharing

General

Target

3077e7dfa37f7b57488e11c7ca0b143c_JaffaCakes118
Size

14KB
Sample

241010-sb77ta1eqh
MD5

3077e7dfa37f7b57488e11c7ca0b143c
SHA1

9876096ccc681b185b6d7d69b0e59d0519e1cd5a
SHA256

fd2f3f0f7c90d07e96d7fb80d79f51e8b81de745839f331a6a42ebb9b410473a
SHA512

31cd6ed8c2e05be765e94da8a4cdd28d350e57d55636b937c192aa3852bdb2b9463f031905d4fc7b27b1845b0e5ba9a6957df0bd6481ae072ec9763d0c5c40e8
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4Yh7:hDXWipuE+K3/SSHgxN

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  3077e7dfa37f7b57488e11c7ca0b143c_JaffaCakes118
- Size
  
  14KB
- MD5
  
  3077e7dfa37f7b57488e11c7ca0b143c
- SHA1
  
  9876096ccc681b185b6d7d69b0e59d0519e1cd5a
- SHA256
  
  fd2f3f0f7c90d07e96d7fb80d79f51e8b81de745839f331a6a42ebb9b410473a
- SHA512
  
  31cd6ed8c2e05be765e94da8a4cdd28d350e57d55636b937c192aa3852bdb2b9463f031905d4fc7b27b1845b0e5ba9a6957df0bd6481ae072ec9763d0c5c40e8
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4Yh7:hDXWipuE+K3/SSHgxN
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2