eb62c74dd9d6ec42a398c82936ab7bb858e8af0ed98e02da29d2600f98a57577 | Triage

Sharing

General

Target

547c0aa76b09406f9571d24ab21988ca_JaffaCakes118
Size

14KB
Sample

241018-avxlbaybrm
MD5

547c0aa76b09406f9571d24ab21988ca
SHA1

975b352d33cf9745d3e863febb8a08369b5acca8
SHA256

eb62c74dd9d6ec42a398c82936ab7bb858e8af0ed98e02da29d2600f98a57577
SHA512

ba65373c497622a55d099f7ed4285ead530f8a87a30ee81f281c989a232decb25a59e0aee839872ea9cde16b9293236d2496803acae81eca5214a9908d1df7cd
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhJx:hDXWipuE+K3/SSHgxt

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  547c0aa76b09406f9571d24ab21988ca_JaffaCakes118
- Size
  
  14KB
- MD5
  
  547c0aa76b09406f9571d24ab21988ca
- SHA1
  
  975b352d33cf9745d3e863febb8a08369b5acca8
- SHA256
  
  eb62c74dd9d6ec42a398c82936ab7bb858e8af0ed98e02da29d2600f98a57577
- SHA512
  
  ba65373c497622a55d099f7ed4285ead530f8a87a30ee81f281c989a232decb25a59e0aee839872ea9cde16b9293236d2496803acae81eca5214a9908d1df7cd
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhJx:hDXWipuE+K3/SSHgxt
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2