ea0e3e401488f6442774f9dfdc05b794a0d632d3a1e71bebd9bc38e42f1bb03f | Triage

Sharing

General

Target

3755096f70f5b06820c778af7e0b2266_JaffaCakes118
Size

14KB
Sample

241011-3dp45azdma
MD5

3755096f70f5b06820c778af7e0b2266
SHA1

cd38bb6be49b74000727b9355368b932fbe5ce2b
SHA256

ea0e3e401488f6442774f9dfdc05b794a0d632d3a1e71bebd9bc38e42f1bb03f
SHA512

d369a7fe5a2ad5fc93e05845cf93507687f1878449544836c781d6210b652dc87caf7122313ccdea652ff24e963e8322ca627c497b2f6a018b3a564280a0e408
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4Yhq:hDXWipuE+K3/SSHgxY

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  3755096f70f5b06820c778af7e0b2266_JaffaCakes118
- Size
  
  14KB
- MD5
  
  3755096f70f5b06820c778af7e0b2266
- SHA1
  
  cd38bb6be49b74000727b9355368b932fbe5ce2b
- SHA256
  
  ea0e3e401488f6442774f9dfdc05b794a0d632d3a1e71bebd9bc38e42f1bb03f
- SHA512
  
  d369a7fe5a2ad5fc93e05845cf93507687f1878449544836c781d6210b652dc87caf7122313ccdea652ff24e963e8322ca627c497b2f6a018b3a564280a0e408
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4Yhq:hDXWipuE+K3/SSHgxY
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2