3c2c608954fe1564e2f9f66ed89d3296c1214626b842cd772df8b43f55be2d38 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

429a7995560ed7dd6fb858ecf23c2519_JaffaCakes118
Size

14KB
Sample

241014-q2zl9ayapc
MD5

429a7995560ed7dd6fb858ecf23c2519
SHA1

5a5134a6c4f9869f19f9366f8dd5cf5c236c45a2
SHA256

3c2c608954fe1564e2f9f66ed89d3296c1214626b842cd772df8b43f55be2d38
SHA512

9becab79f3794f2d837150f0775c99c7fc4844868885a65ebc52e9f910e9cbc1741c5bb9a326a5c06224588958f293262c6f2a058d216c694c0e0930cdab6dee
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhY1:hDXWipuE+K3/SSHgxm1

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  429a7995560ed7dd6fb858ecf23c2519_JaffaCakes118
- Size
  
  14KB
- MD5
  
  429a7995560ed7dd6fb858ecf23c2519
- SHA1
  
  5a5134a6c4f9869f19f9366f8dd5cf5c236c45a2
- SHA256
  
  3c2c608954fe1564e2f9f66ed89d3296c1214626b842cd772df8b43f55be2d38
- SHA512
  
  9becab79f3794f2d837150f0775c99c7fc4844868885a65ebc52e9f910e9cbc1741c5bb9a326a5c06224588958f293262c6f2a058d216c694c0e0930cdab6dee
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhY1:hDXWipuE+K3/SSHgxm1
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2