2d94d5491c4de96deed6bf4b10798178470728f2da0c0cd5fb8fcfdf5aaa0707 | Triage

Sharing

General

Target

3142e5bff1a9d74a024fbd080714fac7_JaffaCakes118
Size

35KB
Sample

240709-vq7kyawfqb
MD5

3142e5bff1a9d74a024fbd080714fac7
SHA1

7c531f6725964d03f92dd3585e219dcc3d31cc9c
SHA256

2d94d5491c4de96deed6bf4b10798178470728f2da0c0cd5fb8fcfdf5aaa0707
SHA512

354807a3e9657989aa61c48bbe7bf2fd228af7fc8b8dd5312c58efb4663031eb2134c9c3b90a2a6788309a8e3692d43e1b4e9b06762bb7df747147d65bc632e1
SSDEEP

384:46NASj10VEnGU1WLIioYZXXPXuXXUXXcXpRMtrb9RBr4UmEh0vboPpdZ6WZKDAfA:tuEnDhYcSb9ROXEyoBdZ67

Score

7^/10

Malware Config

Targets

- Target
  
  3142e5bff1a9d74a024fbd080714fac7_JaffaCakes118
- Size
  
  35KB
- MD5
  
  3142e5bff1a9d74a024fbd080714fac7
- SHA1
  
  7c531f6725964d03f92dd3585e219dcc3d31cc9c
- SHA256
  
  2d94d5491c4de96deed6bf4b10798178470728f2da0c0cd5fb8fcfdf5aaa0707
- SHA512
  
  354807a3e9657989aa61c48bbe7bf2fd228af7fc8b8dd5312c58efb4663031eb2134c9c3b90a2a6788309a8e3692d43e1b4e9b06762bb7df747147d65bc632e1
- SSDEEP
  
  384:46NASj10VEnGU1WLIioYZXXPXuXXUXXcXpRMtrb9RBr4UmEh0vboPpdZ6WZKDAfA:tuEnDhYcSb9ROXEyoBdZ67
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2