1325d5b22ff4188f8015c989e1eb3e3e22bb544c7543ba45ca20cc565c844677 | Triage

Sharing

General

Target

31bdabc41cd0531191d629bb7db64c66_JaffaCakes118
Size

15KB
Sample

240709-yklytssckp
MD5

31bdabc41cd0531191d629bb7db64c66
SHA1

9a955be82d12972bac56fd496be17533bc89e38d
SHA256

1325d5b22ff4188f8015c989e1eb3e3e22bb544c7543ba45ca20cc565c844677
SHA512

7763d2cf44e46f9bffa05a78dc1e2c9c53cff7bd841da7484392d1cbd8e12482d69b9610229d53dd93b3d3626a0fef4467842c9a40f5f434565d78b542e9a40d
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYlb:hDXWipuE+K3/SSHgxmlb

Score

7^/10

Malware Config

Targets

- Target
  
  31bdabc41cd0531191d629bb7db64c66_JaffaCakes118
- Size
  
  15KB
- MD5
  
  31bdabc41cd0531191d629bb7db64c66
- SHA1
  
  9a955be82d12972bac56fd496be17533bc89e38d
- SHA256
  
  1325d5b22ff4188f8015c989e1eb3e3e22bb544c7543ba45ca20cc565c844677
- SHA512
  
  7763d2cf44e46f9bffa05a78dc1e2c9c53cff7bd841da7484392d1cbd8e12482d69b9610229d53dd93b3d3626a0fef4467842c9a40f5f434565d78b542e9a40d
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYlb:hDXWipuE+K3/SSHgxmlb
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2