ac1f4f128ad130f141e12d109b3e3d9394982611630987818bc19b5a0a2ce7fd | Triage

Sharing

General

Target

561d055cc6c0da0756a01748ce967058_JaffaCakes118
Size

14KB
Sample

241018-h2l26atfnf
MD5

561d055cc6c0da0756a01748ce967058
SHA1

8303f42074385c1a54302b4a785c90953b7250cc
SHA256

ac1f4f128ad130f141e12d109b3e3d9394982611630987818bc19b5a0a2ce7fd
SHA512

44e3b821fb1005865036b3f9d1c418c6c016ec09fde394c725706ce7d96fbe3625190177eae784561198a772c05821a31ec7f34f6be059a3d112481e4e98ead1
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhY4bCl:hDXWipuE+K3/SSHgxm0O

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  561d055cc6c0da0756a01748ce967058_JaffaCakes118
- Size
  
  14KB
- MD5
  
  561d055cc6c0da0756a01748ce967058
- SHA1
  
  8303f42074385c1a54302b4a785c90953b7250cc
- SHA256
  
  ac1f4f128ad130f141e12d109b3e3d9394982611630987818bc19b5a0a2ce7fd
- SHA512
  
  44e3b821fb1005865036b3f9d1c418c6c016ec09fde394c725706ce7d96fbe3625190177eae784561198a772c05821a31ec7f34f6be059a3d112481e4e98ead1
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhY4bCl:hDXWipuE+K3/SSHgxm0O
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2