19a3a4338de06cdd7d6ddc3a21763d45ecf2a740877de9a7b5a5bbf349f08ed3 | Triage

Sharing

General

Target

5529692f50962cb88722ebb42c17f13e_JaffaCakes118
Size

35KB
Sample

241018-dpg58awhjr
MD5

5529692f50962cb88722ebb42c17f13e
SHA1

c9b7ccc1ec9f35cb3fbb94cab4b93c78d3012e02
SHA256

19a3a4338de06cdd7d6ddc3a21763d45ecf2a740877de9a7b5a5bbf349f08ed3
SHA512

5affb65326583337d812b662c60fe3af304866920078851cf7ec32761ef87f4ed46e79e724e22f36bffa687564e55dc85f80eb02b93a5bb154f9483322c2c495
SSDEEP

768:8s3DGREVGLeeqbd+VujoXozT1GDl4jYJmBehJODf3jtca4:8wDG6GvWd6ujoiTJYJm0h0fz

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  5529692f50962cb88722ebb42c17f13e_JaffaCakes118
- Size
  
  35KB
- MD5
  
  5529692f50962cb88722ebb42c17f13e
- SHA1
  
  c9b7ccc1ec9f35cb3fbb94cab4b93c78d3012e02
- SHA256
  
  19a3a4338de06cdd7d6ddc3a21763d45ecf2a740877de9a7b5a5bbf349f08ed3
- SHA512
  
  5affb65326583337d812b662c60fe3af304866920078851cf7ec32761ef87f4ed46e79e724e22f36bffa687564e55dc85f80eb02b93a5bb154f9483322c2c495
- SSDEEP
  
  768:8s3DGREVGLeeqbd+VujoXozT1GDl4jYJmBehJODf3jtca4:8wDG6GvWd6ujoiTJYJm0h0fz
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2