b6bb49bb3c1b9e017f052212cb3cf50c10dc029599c4bddc2f980aa4efc9b524 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44062c3d33db1887856cbb53a17a2ae0_JaffaCakes118
Size

15KB
Sample

241014-y6q5nsvckf
MD5

44062c3d33db1887856cbb53a17a2ae0
SHA1

dcc3bbba041cb642278592293e80b35e716e5fb9
SHA256

b6bb49bb3c1b9e017f052212cb3cf50c10dc029599c4bddc2f980aa4efc9b524
SHA512

64936ce323128ea6be50dd41350e75ba3cc16b8f17a0d653abfa2ef7d2f763141bfb0b4add2720949d67c8e12edcb80a22641e83b60247fab55bb997e1ba8d21
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYQMx+Lud:hDXWipuE+K3/SSHgxmHBd

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  44062c3d33db1887856cbb53a17a2ae0_JaffaCakes118
- Size
  
  15KB
- MD5
  
  44062c3d33db1887856cbb53a17a2ae0
- SHA1
  
  dcc3bbba041cb642278592293e80b35e716e5fb9
- SHA256
  
  b6bb49bb3c1b9e017f052212cb3cf50c10dc029599c4bddc2f980aa4efc9b524
- SHA512
  
  64936ce323128ea6be50dd41350e75ba3cc16b8f17a0d653abfa2ef7d2f763141bfb0b4add2720949d67c8e12edcb80a22641e83b60247fab55bb997e1ba8d21
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYQMx+Lud:hDXWipuE+K3/SSHgxmHBd
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2