22192a2f15a0a583c9099f3a172fce973cdbca5d02dfb75bf531667b703a51ce | Triage

Sharing

General

Target

d632a5e07271248812c24c2c02eab902_JaffaCakes118
Size

2.5MB
Sample

240909-nbhvpsxcmd
MD5

d632a5e07271248812c24c2c02eab902
SHA1

c14af1944529a32955dc31c7a34853940d008435
SHA256

22192a2f15a0a583c9099f3a172fce973cdbca5d02dfb75bf531667b703a51ce
SHA512

4df0019ed9dd795f0eaa6a3604e594544ee53779b4e5f9e9488306c102abf727b348635f05b3e9a3688267c18a092f51acdc77b582675d9156f9dc7eda74ec6b
SSDEEP

49152:ocy796EvMtTx435MtV+rnUgKLWgAOXDHpSeZtk6EBI1ru:47AEvgVOXUgKLWgAWHXyH3

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d632a5e07271248812c24c2c02eab902_JaffaCakes118
- Size
  
  2.5MB
- MD5
  
  d632a5e07271248812c24c2c02eab902
- SHA1
  
  c14af1944529a32955dc31c7a34853940d008435
- SHA256
  
  22192a2f15a0a583c9099f3a172fce973cdbca5d02dfb75bf531667b703a51ce
- SHA512
  
  4df0019ed9dd795f0eaa6a3604e594544ee53779b4e5f9e9488306c102abf727b348635f05b3e9a3688267c18a092f51acdc77b582675d9156f9dc7eda74ec6b
- SSDEEP
  
  49152:ocy796EvMtTx435MtV+rnUgKLWgAOXDHpSeZtk6EBI1ru:47AEvgVOXUgKLWgAWHXyH3
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2