fa909aefa264d72f616f00349fed2b324efbde078e3ee18e95aabbc49b1be769 | Triage

Sharing

General

Target

071a4a865873ab9017b935bde54e51d2_JaffaCakes118
Size

165KB
Sample

241001-x5ympazfjh
MD5

071a4a865873ab9017b935bde54e51d2
SHA1

2ad3d5b8c58afb1f3859e4cacbc83658054af934
SHA256

fa909aefa264d72f616f00349fed2b324efbde078e3ee18e95aabbc49b1be769
SHA512

45c90f66eab8233602b07346f003f67efcc685f9e8558abd6933cf0908c1cb89b003dc808db5655a967c22404cb4e62bade0d9a495c6caecc111c41cbf9cc619
SSDEEP

3072:y4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:piI/PlY37ZLF4Ca6WABqBOvs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  071a4a865873ab9017b935bde54e51d2_JaffaCakes118
- Size
  
  165KB
- MD5
  
  071a4a865873ab9017b935bde54e51d2
- SHA1
  
  2ad3d5b8c58afb1f3859e4cacbc83658054af934
- SHA256
  
  fa909aefa264d72f616f00349fed2b324efbde078e3ee18e95aabbc49b1be769
- SHA512
  
  45c90f66eab8233602b07346f003f67efcc685f9e8558abd6933cf0908c1cb89b003dc808db5655a967c22404cb4e62bade0d9a495c6caecc111c41cbf9cc619
- SSDEEP
  
  3072:y4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:piI/PlY37ZLF4Ca6WABqBOvs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2