5a367b89ba13a71315827654a03330e0b30c20690d250ad3c7f3e948f95bfde2 | Triage

Sharing

General

Target

02cdd20c8cab89f30e3e974472ed95cf_JaffaCakes118
Size

165KB
Sample

240930-xj87aszfrr
MD5

02cdd20c8cab89f30e3e974472ed95cf
SHA1

5b653909ef16854d4e584e8072725033c070d629
SHA256

5a367b89ba13a71315827654a03330e0b30c20690d250ad3c7f3e948f95bfde2
SHA512

00320a5f1e1df997d04443f2f3de885775ea01e13a540f2f2f0b2c35e4661999289b268f7acc0e4926d79dbecb2dcd9c531df416a7b7c6ca06b6f376b82071c4
SSDEEP

3072:G4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:liI/PlY37ZLF4Ca6WABqBOvs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  02cdd20c8cab89f30e3e974472ed95cf_JaffaCakes118
- Size
  
  165KB
- MD5
  
  02cdd20c8cab89f30e3e974472ed95cf
- SHA1
  
  5b653909ef16854d4e584e8072725033c070d629
- SHA256
  
  5a367b89ba13a71315827654a03330e0b30c20690d250ad3c7f3e948f95bfde2
- SHA512
  
  00320a5f1e1df997d04443f2f3de885775ea01e13a540f2f2f0b2c35e4661999289b268f7acc0e4926d79dbecb2dcd9c531df416a7b7c6ca06b6f376b82071c4
- SSDEEP
  
  3072:G4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:liI/PlY37ZLF4Ca6WABqBOvs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2