162b2832dcd20580d9367b89a8d0a3b3ef9b1a0e082fc647585f28242393f7e8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ad18b636e6f3bcab9ea43821acc432a_JaffaCakes118
Size

401KB
Sample

240708-dxslxssdna
MD5

2ad18b636e6f3bcab9ea43821acc432a
SHA1

e1f1e172435d736e8b0193710b36bfaa891d7980
SHA256

162b2832dcd20580d9367b89a8d0a3b3ef9b1a0e082fc647585f28242393f7e8
SHA512

250fc847de47df0ac083626b0d0822f4a700398f8187d8b6cfc46cad4922e37c285d4be152a1b0259eae1ecb7065bf5640cdf3b7d43cd05ec9d4ff3990a3d2be
SSDEEP

12288:gutrzh9xOXkOXmPNFUns62osFhLlpym2je76w:gutr5OUOXmPYZ2oiFlpymEO6w

Score

7^/10

Malware Config

Targets

- Target
  
  2ad18b636e6f3bcab9ea43821acc432a_JaffaCakes118
- Size
  
  401KB
- MD5
  
  2ad18b636e6f3bcab9ea43821acc432a
- SHA1
  
  e1f1e172435d736e8b0193710b36bfaa891d7980
- SHA256
  
  162b2832dcd20580d9367b89a8d0a3b3ef9b1a0e082fc647585f28242393f7e8
- SHA512
  
  250fc847de47df0ac083626b0d0822f4a700398f8187d8b6cfc46cad4922e37c285d4be152a1b0259eae1ecb7065bf5640cdf3b7d43cd05ec9d4ff3990a3d2be
- SSDEEP
  
  12288:gutrzh9xOXkOXmPNFUns62osFhLlpym2je76w:gutr5OUOXmPYZ2oiFlpymEO6w
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2