353a036422291c3f66067841dc3fbd0304d14f51a798302c5be7517739a57e72 | Triage

Sharing

General

Target

826db34308f805cfa5b765ce87a60d65_JaffaCakes118
Size

14KB
Sample

241031-j8zghavcjc
MD5

826db34308f805cfa5b765ce87a60d65
SHA1

1290cad47c2ea38366fd07e66b3f3f96e18fe143
SHA256

353a036422291c3f66067841dc3fbd0304d14f51a798302c5be7517739a57e72
SHA512

e40811625f3f9ecb3a51c3b076fe0b244214af60349b8eddbfa2d4f22256e47a79da0cd9463e42a1abc9674bfa647b456e9c49a19f146117ebfa0371a838fd58
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYyOQm:hDXWipuE+K3/SSHgxmyOQm

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  826db34308f805cfa5b765ce87a60d65_JaffaCakes118
- Size
  
  14KB
- MD5
  
  826db34308f805cfa5b765ce87a60d65
- SHA1
  
  1290cad47c2ea38366fd07e66b3f3f96e18fe143
- SHA256
  
  353a036422291c3f66067841dc3fbd0304d14f51a798302c5be7517739a57e72
- SHA512
  
  e40811625f3f9ecb3a51c3b076fe0b244214af60349b8eddbfa2d4f22256e47a79da0cd9463e42a1abc9674bfa647b456e9c49a19f146117ebfa0371a838fd58
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYyOQm:hDXWipuE+K3/SSHgxmyOQm
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2