d36aefc1c4fa84c853d33afae00ff585fd9335f2216586ffa3eadd3195835006 | Triage

Sharing

General

Target

417b39c3251dc5dbe7c6622091853729_JaffaCakes118
Size

15KB
Sample

240713-nk5qtsyepp
MD5

417b39c3251dc5dbe7c6622091853729
SHA1

b15a7be9fd7d93fcfdac0875f74c84d5aa528f7e
SHA256

d36aefc1c4fa84c853d33afae00ff585fd9335f2216586ffa3eadd3195835006
SHA512

471c2c93bff1516456a7ef55ded17bcc781d0c61af2d083bb78a5eafa1df7c2323acecbae2167a7e76cb078373abe7cd5344e029ec46a28498e7706c627a77cc
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYlzvOw:hDXWipuE+K3/SSHgxmlKw

Score

7^/10

Malware Config

Targets

- Target
  
  417b39c3251dc5dbe7c6622091853729_JaffaCakes118
- Size
  
  15KB
- MD5
  
  417b39c3251dc5dbe7c6622091853729
- SHA1
  
  b15a7be9fd7d93fcfdac0875f74c84d5aa528f7e
- SHA256
  
  d36aefc1c4fa84c853d33afae00ff585fd9335f2216586ffa3eadd3195835006
- SHA512
  
  471c2c93bff1516456a7ef55ded17bcc781d0c61af2d083bb78a5eafa1df7c2323acecbae2167a7e76cb078373abe7cd5344e029ec46a28498e7706c627a77cc
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYlzvOw:hDXWipuE+K3/SSHgxmlKw
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2