eac04009069a23a8c326dd385181fb1c1b967d2866037c2384db21471a46ab61 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

457a3bfad4447d1d1a5fa5ee79b6ce70_JaffaCakes118
Size

483KB
Sample

241015-dd6pfavejm
MD5

457a3bfad4447d1d1a5fa5ee79b6ce70
SHA1

f3d67c104ae9961f2a7a3f976dbfe05bdb0f86d7
SHA256

eac04009069a23a8c326dd385181fb1c1b967d2866037c2384db21471a46ab61
SHA512

7b3d4381341036584e22c1e8dd7dc61578d4b53fd84707569b85c4f6ec7c4d3dd69f8901fbd2db5aeb15f9895b4b5601d33954d2a8315d7055d8b88a6654ccb1
SSDEEP

6144:w8OeDVkmxOwPAjPqczjL+/r3xil9TsC0RjBilGRk3lqy4PuA:wYOmxOAAjZzu/r3QPTf0RtDqYZuA

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  457a3bfad4447d1d1a5fa5ee79b6ce70_JaffaCakes118
- Size
  
  483KB
- MD5
  
  457a3bfad4447d1d1a5fa5ee79b6ce70
- SHA1
  
  f3d67c104ae9961f2a7a3f976dbfe05bdb0f86d7
- SHA256
  
  eac04009069a23a8c326dd385181fb1c1b967d2866037c2384db21471a46ab61
- SHA512
  
  7b3d4381341036584e22c1e8dd7dc61578d4b53fd84707569b85c4f6ec7c4d3dd69f8901fbd2db5aeb15f9895b4b5601d33954d2a8315d7055d8b88a6654ccb1
- SSDEEP
  
  6144:w8OeDVkmxOwPAjPqczjL+/r3xil9TsC0RjBilGRk3lqy4PuA:wYOmxOAAjZzu/r3QPTf0RtDqYZuA
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2