a0eca9806476cb6001d3f394d3b8252e7347158e5877b99a5c1fc4c5570c3e6a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

436761d8954fd8bfe07b73c734ae3459_JaffaCakes118
Size

14KB
Sample

241014-v9wb1s1fjq
MD5

436761d8954fd8bfe07b73c734ae3459
SHA1

c572522907347b4e1b6ba959cc13129639d7157b
SHA256

a0eca9806476cb6001d3f394d3b8252e7347158e5877b99a5c1fc4c5570c3e6a
SHA512

c10ec44108c4d386f911680af1ae9c12178e092a1b2c6aa92058a87bd5410d0fd3071c1501a34779418a2845124bb88e5fd5c3cca72291ea37d744d366334909
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhRI:hDXWipuE+K3/SSHgxc

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  436761d8954fd8bfe07b73c734ae3459_JaffaCakes118
- Size
  
  14KB
- MD5
  
  436761d8954fd8bfe07b73c734ae3459
- SHA1
  
  c572522907347b4e1b6ba959cc13129639d7157b
- SHA256
  
  a0eca9806476cb6001d3f394d3b8252e7347158e5877b99a5c1fc4c5570c3e6a
- SHA512
  
  c10ec44108c4d386f911680af1ae9c12178e092a1b2c6aa92058a87bd5410d0fd3071c1501a34779418a2845124bb88e5fd5c3cca72291ea37d744d366334909
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhRI:hDXWipuE+K3/SSHgxc
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2