36cf1c72b86d85756d90c200e19555a466ced420da0be0b2d1341d8421251427 | Triage

Sharing

General

Target

a774f53e6652ecd19d4689d324e1474c_JaffaCakes118
Size

195KB
Sample

240818-vddgbstdne
MD5

a774f53e6652ecd19d4689d324e1474c
SHA1

19f8ec91738c416ce77ad85a61158d6656e3639a
SHA256

36cf1c72b86d85756d90c200e19555a466ced420da0be0b2d1341d8421251427
SHA512

1f0bb010803354eaa0154abba0b4d930118a0131bb393db703f314e450c2a1ebc48f5682f1ab15ebe0d9acf3cde49d44fbcafdb8ab5c158da2584a25c5414ae6
SSDEEP

3072:CMSncRzAO2Ist0JDy9Zht+s88lELPfvGQG9uqfAgJsnYv:xSncRlQmDy9Zmshc3gZfA2sn

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a774f53e6652ecd19d4689d324e1474c_JaffaCakes118
- Size
  
  195KB
- MD5
  
  a774f53e6652ecd19d4689d324e1474c
- SHA1
  
  19f8ec91738c416ce77ad85a61158d6656e3639a
- SHA256
  
  36cf1c72b86d85756d90c200e19555a466ced420da0be0b2d1341d8421251427
- SHA512
  
  1f0bb010803354eaa0154abba0b4d930118a0131bb393db703f314e450c2a1ebc48f5682f1ab15ebe0d9acf3cde49d44fbcafdb8ab5c158da2584a25c5414ae6
- SSDEEP
  
  3072:CMSncRzAO2Ist0JDy9Zht+s88lELPfvGQG9uqfAgJsnYv:xSncRlQmDy9Zmshc3gZfA2sn
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2