3de2f7a8bda95979ec5bef0f7119d12ffdfcc4997f9a4ff98fef117822ae378e | Triage

Sharing

General

Target

00baf0685f0f1efdcbd0fbc45e2b82f5_JaffaCakes118
Size

165KB
Sample

240930-lxk6vatbma
MD5

00baf0685f0f1efdcbd0fbc45e2b82f5
SHA1

200cce398da884572ee3c9051438513f2c76a717
SHA256

3de2f7a8bda95979ec5bef0f7119d12ffdfcc4997f9a4ff98fef117822ae378e
SHA512

eb1b412e249ec6333162d41503ae577b7ae9e0d7a54e121d2d8f667054469285fd0181d7b6a536d65984176f38e114f8641b8775ecd5372e24b46458cd6bff96
SSDEEP

3072:T4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:siI/PlY37ZLF4Ca6WABqBOvs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  00baf0685f0f1efdcbd0fbc45e2b82f5_JaffaCakes118
- Size
  
  165KB
- MD5
  
  00baf0685f0f1efdcbd0fbc45e2b82f5
- SHA1
  
  200cce398da884572ee3c9051438513f2c76a717
- SHA256
  
  3de2f7a8bda95979ec5bef0f7119d12ffdfcc4997f9a4ff98fef117822ae378e
- SHA512
  
  eb1b412e249ec6333162d41503ae577b7ae9e0d7a54e121d2d8f667054469285fd0181d7b6a536d65984176f38e114f8641b8775ecd5372e24b46458cd6bff96
- SSDEEP
  
  3072:T4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:siI/PlY37ZLF4Ca6WABqBOvs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2