5fc902d366e6ee1386a8d8c4a015f55281cde13b99589e72c0365c3f8aa12e06 | Triage

Sharing

General

Target

3c9a2900d31fb1b91c189473da7cd487_JaffaCakes118
Size

14KB
Sample

241012-3hcpla1gnq
MD5

3c9a2900d31fb1b91c189473da7cd487
SHA1

d341b0bc21e576a70451d23dab16f5c6994a51f9
SHA256

5fc902d366e6ee1386a8d8c4a015f55281cde13b99589e72c0365c3f8aa12e06
SHA512

6f83fbc6d9bd754d602b0723944567f1355c0615aa799657d5fe62ea894f3ab51ab2656f166ce32f6119e5329cc7a178ef49f6584b6a4603436d4144e7a1625c
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhP:hDXWipuE+K3/SSHgxp

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  3c9a2900d31fb1b91c189473da7cd487_JaffaCakes118
- Size
  
  14KB
- MD5
  
  3c9a2900d31fb1b91c189473da7cd487
- SHA1
  
  d341b0bc21e576a70451d23dab16f5c6994a51f9
- SHA256
  
  5fc902d366e6ee1386a8d8c4a015f55281cde13b99589e72c0365c3f8aa12e06
- SHA512
  
  6f83fbc6d9bd754d602b0723944567f1355c0615aa799657d5fe62ea894f3ab51ab2656f166ce32f6119e5329cc7a178ef49f6584b6a4603436d4144e7a1625c
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhP:hDXWipuE+K3/SSHgxp
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2