a7b2d37b5da9225c351f67330424ba596c30dbd7dc74cd89492ff6eba8747a9e | Triage

Sharing

General

Target

a5d12e4eab8122fe69060b5292a2a932_JaffaCakes118
Size

741KB
Sample

240818-hsxgja1hlf
MD5

a5d12e4eab8122fe69060b5292a2a932
SHA1

30d9ac77e8c41ce3370c684f73d5b5ec93431fd0
SHA256

a7b2d37b5da9225c351f67330424ba596c30dbd7dc74cd89492ff6eba8747a9e
SHA512

32a04bbd5c81c460188f737a9592ce05ee276f41981e08a704aafd90f5fca26f33194de19a7eedadd1a044b6937846ac3f0fd47ac35ae59748c899391c83ce43
SSDEEP

12288:/430KrWkT5knhbOuL7ryfYqZx8QSuQ3euwiMEt82ROb2HYZuoU08crO2tkDjch23:/4khkSnhbh3bqZx8sQ3KiM+tRzHzoUtd

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a5d12e4eab8122fe69060b5292a2a932_JaffaCakes118
- Size
  
  741KB
- MD5
  
  a5d12e4eab8122fe69060b5292a2a932
- SHA1
  
  30d9ac77e8c41ce3370c684f73d5b5ec93431fd0
- SHA256
  
  a7b2d37b5da9225c351f67330424ba596c30dbd7dc74cd89492ff6eba8747a9e
- SHA512
  
  32a04bbd5c81c460188f737a9592ce05ee276f41981e08a704aafd90f5fca26f33194de19a7eedadd1a044b6937846ac3f0fd47ac35ae59748c899391c83ce43
- SSDEEP
  
  12288:/430KrWkT5knhbOuL7ryfYqZx8QSuQ3euwiMEt82ROb2HYZuoU08crO2tkDjch23:/4khkSnhbh3bqZx8sQ3KiM+tRzHzoUtd
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2