4e2dd742103b5616cddb0ae50f36dbf4b148f2512d035da604c9b71dfa6941f1 | Triage

Sharing

General

Target

53f3f6c8ec632e238c046acae28a5fc7_JaffaCakes118
Size

14KB
Sample

241017-1x42aascml
MD5

53f3f6c8ec632e238c046acae28a5fc7
SHA1

532f9db02a32b03b9ccc68faf2930f657f95afda
SHA256

4e2dd742103b5616cddb0ae50f36dbf4b148f2512d035da604c9b71dfa6941f1
SHA512

bdf906c4aae91a487df47cf84c1c1669f6bae3004642b84116bd6607667e6809b0e8753616f3c79491af7014d95b855bbe5cb5092e8b0b0edccc23db791f0b24
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYyhs:hDXWipuE+K3/SSHgxmyhs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  53f3f6c8ec632e238c046acae28a5fc7_JaffaCakes118
- Size
  
  14KB
- MD5
  
  53f3f6c8ec632e238c046acae28a5fc7
- SHA1
  
  532f9db02a32b03b9ccc68faf2930f657f95afda
- SHA256
  
  4e2dd742103b5616cddb0ae50f36dbf4b148f2512d035da604c9b71dfa6941f1
- SHA512
  
  bdf906c4aae91a487df47cf84c1c1669f6bae3004642b84116bd6607667e6809b0e8753616f3c79491af7014d95b855bbe5cb5092e8b0b0edccc23db791f0b24
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYyhs:hDXWipuE+K3/SSHgxmyhs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2