152e8d1e2ebc29102e41696b6231fc383aa4de8b50ab7f0d66623091910a4585 | Triage

Sharing

General

Target

0647ac161d90cd686e15985a6ac7c162_JaffaCakes118
Size

163KB
Sample

241001-see1fazcka
MD5

0647ac161d90cd686e15985a6ac7c162
SHA1

ffd21475de15cd5c20d378095feff0550d009ffb
SHA256

152e8d1e2ebc29102e41696b6231fc383aa4de8b50ab7f0d66623091910a4585
SHA512

2daa072be8d3605895ec803202baf56d8bdaff4644eb94b610fe5cfde84ed99e59c238e66bc7ad7761acd7ac0b7d5217146b1eb118289c9c19ee3b2513236290
SSDEEP

3072:L4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4U:0iI/PlY37ZLF4Ca6WABqBOvsU

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  0647ac161d90cd686e15985a6ac7c162_JaffaCakes118
- Size
  
  163KB
- MD5
  
  0647ac161d90cd686e15985a6ac7c162
- SHA1
  
  ffd21475de15cd5c20d378095feff0550d009ffb
- SHA256
  
  152e8d1e2ebc29102e41696b6231fc383aa4de8b50ab7f0d66623091910a4585
- SHA512
  
  2daa072be8d3605895ec803202baf56d8bdaff4644eb94b610fe5cfde84ed99e59c238e66bc7ad7761acd7ac0b7d5217146b1eb118289c9c19ee3b2513236290
- SSDEEP
  
  3072:L4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4U:0iI/PlY37ZLF4Ca6WABqBOvsU
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2