80b138d4e20f1773ede9a25ef94b1fbe016e043ca87f3ea3fb3d217fe13326f3 | Triage

Sharing

General

Target

01dd9ad0e8aca096773cb903a5dd6a65_JaffaCakes118
Size

165KB
Sample

240930-r2laas1all
MD5

01dd9ad0e8aca096773cb903a5dd6a65
SHA1

5efe8ef52fd652f24e51849a6272a76568e82a83
SHA256

80b138d4e20f1773ede9a25ef94b1fbe016e043ca87f3ea3fb3d217fe13326f3
SHA512

d56be6f567def384936c8f77616d18cd727c914a087972e469762848cedcec58f05b733093bea659c2752eb67fc8ba0f7e7689781df22c5f5d1ed3a6b099b3b2
SSDEEP

3072:V4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:miI/PlY37ZLF4Ca6WABqBOvs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  01dd9ad0e8aca096773cb903a5dd6a65_JaffaCakes118
- Size
  
  165KB
- MD5
  
  01dd9ad0e8aca096773cb903a5dd6a65
- SHA1
  
  5efe8ef52fd652f24e51849a6272a76568e82a83
- SHA256
  
  80b138d4e20f1773ede9a25ef94b1fbe016e043ca87f3ea3fb3d217fe13326f3
- SHA512
  
  d56be6f567def384936c8f77616d18cd727c914a087972e469762848cedcec58f05b733093bea659c2752eb67fc8ba0f7e7689781df22c5f5d1ed3a6b099b3b2
- SSDEEP
  
  3072:V4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:miI/PlY37ZLF4Ca6WABqBOvs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2