b10d27134a1515e0a3f45d13e831b8d6d6e5d3ecb522a1fa6e5afae879c708a7 | Triage

Sharing

General

Target

0d5c05b5ca40b6e61798a9bb9e6e8c31_JaffaCakes118
Size

325KB
Sample

240625-j82lvs1hrl
MD5

0d5c05b5ca40b6e61798a9bb9e6e8c31
SHA1

2160f747dba63d1ea3deff1a938bba8ab8576c86
SHA256

b10d27134a1515e0a3f45d13e831b8d6d6e5d3ecb522a1fa6e5afae879c708a7
SHA512

03ad262947f4de46b4b4c7c1ff2827e4f5e053f4a640dc2fd6257cbc0f7f6fc4622a7ffc1b12d7593479a566f758ec42a015b7277207be1a8d549d4f65164f72
SSDEEP

6144:Ix4IFakx8qvAYZwf4SykhMM6dbsPSbYkFWPBb8nKMvYwsNi:S4pfqMvhF6arPBYnKxw+i

Score

7^/10

Malware Config

Targets

- Target
  
  0d5c05b5ca40b6e61798a9bb9e6e8c31_JaffaCakes118
- Size
  
  325KB
- MD5
  
  0d5c05b5ca40b6e61798a9bb9e6e8c31
- SHA1
  
  2160f747dba63d1ea3deff1a938bba8ab8576c86
- SHA256
  
  b10d27134a1515e0a3f45d13e831b8d6d6e5d3ecb522a1fa6e5afae879c708a7
- SHA512
  
  03ad262947f4de46b4b4c7c1ff2827e4f5e053f4a640dc2fd6257cbc0f7f6fc4622a7ffc1b12d7593479a566f758ec42a015b7277207be1a8d549d4f65164f72
- SSDEEP
  
  6144:Ix4IFakx8qvAYZwf4SykhMM6dbsPSbYkFWPBb8nKMvYwsNi:S4pfqMvhF6arPBYnKxw+i
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2