81a5d836d90b6954eee3c2cadf13d8375f60da37255c5212573914bffb14c010 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01302e4cb16cbbc7d8bbf6d0dfad04e9_JaffaCakes118
Size

165KB
Sample

240930-n39gqstfjq
MD5

01302e4cb16cbbc7d8bbf6d0dfad04e9
SHA1

f4dbf6abfe46d99a25253c84c65c3eb71987b787
SHA256

81a5d836d90b6954eee3c2cadf13d8375f60da37255c5212573914bffb14c010
SHA512

0cc0f0a06d3fe27ffde0683537d0e8f26043988c2e0b08f9d5fcd63ec8a350badc4a5581e4da9a401202b8f7c0d0d996fee8684124d165e8588ea4bc24fc13f3
SSDEEP

3072:N4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:OiI/PlY37ZLF4Ca6WABqBOvs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  01302e4cb16cbbc7d8bbf6d0dfad04e9_JaffaCakes118
- Size
  
  165KB
- MD5
  
  01302e4cb16cbbc7d8bbf6d0dfad04e9
- SHA1
  
  f4dbf6abfe46d99a25253c84c65c3eb71987b787
- SHA256
  
  81a5d836d90b6954eee3c2cadf13d8375f60da37255c5212573914bffb14c010
- SHA512
  
  0cc0f0a06d3fe27ffde0683537d0e8f26043988c2e0b08f9d5fcd63ec8a350badc4a5581e4da9a401202b8f7c0d0d996fee8684124d165e8588ea4bc24fc13f3
- SSDEEP
  
  3072:N4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:OiI/PlY37ZLF4Ca6WABqBOvs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2