55fc6b32b75e52c8b3a22c2e40727f561ee2aa5399a615abd5640b55ffff057c | Triage

Sharing

General

Target

394b7733dc54b52fcf54704c2c1f4d26_JaffaCakes118
Size

14KB
Sample

241012-lbbehstcje
MD5

394b7733dc54b52fcf54704c2c1f4d26
SHA1

b028fc6f56f452737f6a9349c41cddb831fceb14
SHA256

55fc6b32b75e52c8b3a22c2e40727f561ee2aa5399a615abd5640b55ffff057c
SHA512

de7f615049e64b0c26bf8d560f7552db871497bc4659eb13a7c2cafa531b29e83dd43e1e0a4826a7156eba39fb089690c799dd1c4d11c930cab26550b240ecce
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYWmbSC:hDXWipuE+K3/SSHgxmWmbSC

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  394b7733dc54b52fcf54704c2c1f4d26_JaffaCakes118
- Size
  
  14KB
- MD5
  
  394b7733dc54b52fcf54704c2c1f4d26
- SHA1
  
  b028fc6f56f452737f6a9349c41cddb831fceb14
- SHA256
  
  55fc6b32b75e52c8b3a22c2e40727f561ee2aa5399a615abd5640b55ffff057c
- SHA512
  
  de7f615049e64b0c26bf8d560f7552db871497bc4659eb13a7c2cafa531b29e83dd43e1e0a4826a7156eba39fb089690c799dd1c4d11c930cab26550b240ecce
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYWmbSC:hDXWipuE+K3/SSHgxmWmbSC
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2