c478f06e3d45c5f05da0badfe44ca888feab6b3fb55e8825e30a71cdb8bf8577 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5465af5ed7808c6acd7f639e68f9bca2_JaffaCakes118
Size

14KB
Sample

241018-afz3wsxdnj
MD5

5465af5ed7808c6acd7f639e68f9bca2
SHA1

75e1e183c933b4a1ba1594642f94e9b17e9d26bd
SHA256

c478f06e3d45c5f05da0badfe44ca888feab6b3fb55e8825e30a71cdb8bf8577
SHA512

4f68aea9200a4b90e714ac7348297c64861b1a63c48fc891ebf5e15791d6d59c058999897efbb1c8490146274c79b613cd0b60a5a46360e81feab50f92e5c3dc
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4Yhs:hDXWipuE+K3/SSHgxy

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  5465af5ed7808c6acd7f639e68f9bca2_JaffaCakes118
- Size
  
  14KB
- MD5
  
  5465af5ed7808c6acd7f639e68f9bca2
- SHA1
  
  75e1e183c933b4a1ba1594642f94e9b17e9d26bd
- SHA256
  
  c478f06e3d45c5f05da0badfe44ca888feab6b3fb55e8825e30a71cdb8bf8577
- SHA512
  
  4f68aea9200a4b90e714ac7348297c64861b1a63c48fc891ebf5e15791d6d59c058999897efbb1c8490146274c79b613cd0b60a5a46360e81feab50f92e5c3dc
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4Yhs:hDXWipuE+K3/SSHgxy
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2