d32ee6a01a7fc4507cba98d4198743c2abc7826c4348572166e1f77c2b23522f | Triage

Sharing

General

Target

55e1bab60c0fb72865e94941a39e6488_JaffaCakes118
Size

36KB
Sample

241018-gxcggsvamq
MD5

55e1bab60c0fb72865e94941a39e6488
SHA1

fa93bcaef8351e03670f427d7a811af44511a08a
SHA256

d32ee6a01a7fc4507cba98d4198743c2abc7826c4348572166e1f77c2b23522f
SHA512

5e464d8c73eb4edcc5eebf30a3f0dea4bb8facfad99dd7ab3282dbdaf96a1c54b42bb01f6eda102143cb2556e36ea9490ce3c8e3c87bb1e18d9e3b36a8f34822
SSDEEP

768:OLvqk3WDdgZJ/UHSK7u2UL99pQw0GSXYn9ieDDk3iQ0U:OLj3WDk2HSOuB5bQjucH

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  55e1bab60c0fb72865e94941a39e6488_JaffaCakes118
- Size
  
  36KB
- MD5
  
  55e1bab60c0fb72865e94941a39e6488
- SHA1
  
  fa93bcaef8351e03670f427d7a811af44511a08a
- SHA256
  
  d32ee6a01a7fc4507cba98d4198743c2abc7826c4348572166e1f77c2b23522f
- SHA512
  
  5e464d8c73eb4edcc5eebf30a3f0dea4bb8facfad99dd7ab3282dbdaf96a1c54b42bb01f6eda102143cb2556e36ea9490ce3c8e3c87bb1e18d9e3b36a8f34822
- SSDEEP
  
  768:OLvqk3WDdgZJ/UHSK7u2UL99pQw0GSXYn9ieDDk3iQ0U:OLj3WDk2HSOuB5bQjucH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2