213b1c5966828ac3ec11f8fe3e5beb288eed59aca033c52db1aa105fb8e0996d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

824380554c006c39a533b016f99cc04a_JaffaCakes118
Size

628KB
Sample

240529-22ahxaeb66
MD5

824380554c006c39a533b016f99cc04a
SHA1

356a773e0e036488fe5af22f38ea96dd5b3e2909
SHA256

213b1c5966828ac3ec11f8fe3e5beb288eed59aca033c52db1aa105fb8e0996d
SHA512

8963c102f178b2933140c7c54b2b53f027025436d63a64800ee6af8f70bddebed15389f026a2f1965f538dc3402c155983c2d0564823fe37363c88670f2931ac
SSDEEP

12288:Glo8a091R96mt4kNyZI+GMBJ/89mJ3MFbZYjEvUvsha4:21a098DkNyZIHMX8mWZCE8vsha4

Score

7^/10

Malware Config

Targets

- Target
  
  824380554c006c39a533b016f99cc04a_JaffaCakes118
- Size
  
  628KB
- MD5
  
  824380554c006c39a533b016f99cc04a
- SHA1
  
  356a773e0e036488fe5af22f38ea96dd5b3e2909
- SHA256
  
  213b1c5966828ac3ec11f8fe3e5beb288eed59aca033c52db1aa105fb8e0996d
- SHA512
  
  8963c102f178b2933140c7c54b2b53f027025436d63a64800ee6af8f70bddebed15389f026a2f1965f538dc3402c155983c2d0564823fe37363c88670f2931ac
- SSDEEP
  
  12288:Glo8a091R96mt4kNyZI+GMBJ/89mJ3MFbZYjEvUvsha4:21a098DkNyZIHMX8mWZCE8vsha4
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2