cd36ef7a96ac3ea6cf6c7c9ddd32cf52afe359685d4a362f1140e148d8d47dd9 | Triage

Sharing

General

Target

d31ce4cfca926c4f12621dd0aacad529_JaffaCakes118
Size

76KB
Sample

240908-aekltashmk
MD5

d31ce4cfca926c4f12621dd0aacad529
SHA1

e2fd9c90c90fc309f2dec8d4258bebab67dd3603
SHA256

cd36ef7a96ac3ea6cf6c7c9ddd32cf52afe359685d4a362f1140e148d8d47dd9
SHA512

c292bbece03706d8b9d3cd89b2469620ff8e9d805c9e6ea4e7f5f7595d5ad677dbb41e7700f8545694bcaf5e89ae986f2a078a2d96b68cf85146624fc7da5098
SSDEEP

1536:Xn/oYXOzjiNs5ng9JvzY7qQvjJqBli0wY7kM+ia0NSYo:X/oNng76vjUji0wY7kga0NSYo

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d31ce4cfca926c4f12621dd0aacad529_JaffaCakes118
- Size
  
  76KB
- MD5
  
  d31ce4cfca926c4f12621dd0aacad529
- SHA1
  
  e2fd9c90c90fc309f2dec8d4258bebab67dd3603
- SHA256
  
  cd36ef7a96ac3ea6cf6c7c9ddd32cf52afe359685d4a362f1140e148d8d47dd9
- SHA512
  
  c292bbece03706d8b9d3cd89b2469620ff8e9d805c9e6ea4e7f5f7595d5ad677dbb41e7700f8545694bcaf5e89ae986f2a078a2d96b68cf85146624fc7da5098
- SSDEEP
  
  1536:Xn/oYXOzjiNs5ng9JvzY7qQvjJqBli0wY7kM+ia0NSYo:X/oNng76vjUji0wY7kga0NSYo
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2