143a3b58ed477c0c49431d90cb7d12d16911295700abe0af9bccf4f49fcd55fb | Triage

Sharing

General

Target

06af3cfd2121fbf8890a863f652652e9_JaffaCakes118
Size

286KB
Sample

240429-dlkryagc63
MD5

06af3cfd2121fbf8890a863f652652e9
SHA1

3c36f2f70eae3fb3ffca06b80df0b76a9502f610
SHA256

143a3b58ed477c0c49431d90cb7d12d16911295700abe0af9bccf4f49fcd55fb
SHA512

b4ac4a9fe6c31f9261c6a06bfb124ab20d8ffe0119e406f67a53634c42ce04a5fa2f9b57902673dcb0fcf0b709f72cb386ec232a66c7bc7134997c169ba0227f
SSDEEP

6144:umRZ2W5Ij46YOG0G+EQ2eiAIQibh8HOlxHUbx1LqrGU:u6H67bG0lEQ2kioOlNUv2rGU

Score

7^/10

Malware Config

Targets

- Target
  
  06af3cfd2121fbf8890a863f652652e9_JaffaCakes118
- Size
  
  286KB
- MD5
  
  06af3cfd2121fbf8890a863f652652e9
- SHA1
  
  3c36f2f70eae3fb3ffca06b80df0b76a9502f610
- SHA256
  
  143a3b58ed477c0c49431d90cb7d12d16911295700abe0af9bccf4f49fcd55fb
- SHA512
  
  b4ac4a9fe6c31f9261c6a06bfb124ab20d8ffe0119e406f67a53634c42ce04a5fa2f9b57902673dcb0fcf0b709f72cb386ec232a66c7bc7134997c169ba0227f
- SSDEEP
  
  6144:umRZ2W5Ij46YOG0G+EQ2eiAIQibh8HOlxHUbx1LqrGU:u6H67bG0lEQ2kioOlNUv2rGU
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2