ef04e66df75d651f6a1c4bd69061b45a724285b48cef63b4a098bd8a54c62ae9 | Triage

Sharing

General

Target

3ab93d2b8f390e76e694cb37d02bebbf_JaffaCakes118
Size

1.3MB
Sample

241012-spj25s1fqp
MD5

3ab93d2b8f390e76e694cb37d02bebbf
SHA1

cb250d064d1b9496e5a73719ddc46558b58fd28a
SHA256

ef04e66df75d651f6a1c4bd69061b45a724285b48cef63b4a098bd8a54c62ae9
SHA512

18f87fea38472d227160493def55b12798f9cf771bffd761a9f2cb2703f33450a597fd122c15604014dc12ec6b861018ac3f6bfe515813796293a8d72f6c0aab
SSDEEP

24576:r4VrnKNT/nftqot/j7U8tcKm/IXAg9LbRKAv1WqJoo2RAUlmvJ7B905zfXKkfz+l:cFoL1qq/HUJ+n1WqJV2RAbvJL05zfXdg

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  3ab93d2b8f390e76e694cb37d02bebbf_JaffaCakes118
- Size
  
  1.3MB
- MD5
  
  3ab93d2b8f390e76e694cb37d02bebbf
- SHA1
  
  cb250d064d1b9496e5a73719ddc46558b58fd28a
- SHA256
  
  ef04e66df75d651f6a1c4bd69061b45a724285b48cef63b4a098bd8a54c62ae9
- SHA512
  
  18f87fea38472d227160493def55b12798f9cf771bffd761a9f2cb2703f33450a597fd122c15604014dc12ec6b861018ac3f6bfe515813796293a8d72f6c0aab
- SSDEEP
  
  24576:r4VrnKNT/nftqot/j7U8tcKm/IXAg9LbRKAv1WqJoo2RAUlmvJ7B905zfXKkfz+l:cFoL1qq/HUJ+n1WqJV2RAbvJL05zfXdg
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2