52f8984617fbbaae1e9520deb533e2fbd669b3ab8675bbf8445026f384dba242 | Triage

Sharing

General

Target

084b7939f741331bc66d6e10980dd514_JaffaCakes118
Size

165KB
Sample

241002-b35sbsvbrg
MD5

084b7939f741331bc66d6e10980dd514
SHA1

cee8038ce74c12f263204567f3ffd2557646cf5a
SHA256

52f8984617fbbaae1e9520deb533e2fbd669b3ab8675bbf8445026f384dba242
SHA512

7e9c64bf070e518a1f6cd39b837894ba95d2be80b01084012a6cdf60d9ea6dce7277bab84d592aac77874bedcb620a4cc7d90e88b9d3f4b8a3dc76365a91da11
SSDEEP

3072:b4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:kiI/PlY37ZLF4Ca6WABqBOvs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  084b7939f741331bc66d6e10980dd514_JaffaCakes118
- Size
  
  165KB
- MD5
  
  084b7939f741331bc66d6e10980dd514
- SHA1
  
  cee8038ce74c12f263204567f3ffd2557646cf5a
- SHA256
  
  52f8984617fbbaae1e9520deb533e2fbd669b3ab8675bbf8445026f384dba242
- SHA512
  
  7e9c64bf070e518a1f6cd39b837894ba95d2be80b01084012a6cdf60d9ea6dce7277bab84d592aac77874bedcb620a4cc7d90e88b9d3f4b8a3dc76365a91da11
- SSDEEP
  
  3072:b4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:kiI/PlY37ZLF4Ca6WABqBOvs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2