36c5fdcf5d8394ae269554001904c4557136627c80e1a8e250571bd52ea6bd81 | Triage

Sharing

General

Target

32d014383dc718592281576b124903a4_JaffaCakes118
Size

745KB
Sample

240710-b2e6aazhqa
MD5

32d014383dc718592281576b124903a4
SHA1

287d26e8f453a3b7090bfa4bbf819383814c7b4c
SHA256

36c5fdcf5d8394ae269554001904c4557136627c80e1a8e250571bd52ea6bd81
SHA512

028fc07c36a5109eeb0fb9694750c428b5f847ce5802b1a84a5c5814312b98815142bd9f61f184d3deb677dd315031354533d902094854f60e4d230824e191a5
SSDEEP

12288:UEjIh5hsLnEjIhTAkAMTvK5S8FeoLCthvomJ4YJGpy7mpo:UHyLnHSZ+t55VJV

Score

7^/10

Malware Config

Targets

- Target
  
  32d014383dc718592281576b124903a4_JaffaCakes118
- Size
  
  745KB
- MD5
  
  32d014383dc718592281576b124903a4
- SHA1
  
  287d26e8f453a3b7090bfa4bbf819383814c7b4c
- SHA256
  
  36c5fdcf5d8394ae269554001904c4557136627c80e1a8e250571bd52ea6bd81
- SHA512
  
  028fc07c36a5109eeb0fb9694750c428b5f847ce5802b1a84a5c5814312b98815142bd9f61f184d3deb677dd315031354533d902094854f60e4d230824e191a5
- SSDEEP
  
  12288:UEjIh5hsLnEjIhTAkAMTvK5S8FeoLCthvomJ4YJGpy7mpo:UHyLnHSZ+t55VJV
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2