31b50a51c77f7afdb6b6c0e5e5ae4c20aa7b919613de09bed2ce278924af1c6b | Triage

Sharing

General

Target

084bd82f39f48a59293966e37530f48b_JaffaCakes118
Size

163KB
Sample

241002-b4ebrsvcjg
MD5

084bd82f39f48a59293966e37530f48b
SHA1

c8448dcfa877b85585a601b17c02f60d07cc9e41
SHA256

31b50a51c77f7afdb6b6c0e5e5ae4c20aa7b919613de09bed2ce278924af1c6b
SHA512

9693cf639f3dff342a79de6c7e71bf1fcc1ff8921bb8a840cf4cd2cf4eed1dae9fca9762d1c3df262dfbb033f17d2788860359630ad3a8dab681fdced02591d6
SSDEEP

3072:C4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4y:ZiI/PlY37ZLF4Ca6WABqBOvsy

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  084bd82f39f48a59293966e37530f48b_JaffaCakes118
- Size
  
  163KB
- MD5
  
  084bd82f39f48a59293966e37530f48b
- SHA1
  
  c8448dcfa877b85585a601b17c02f60d07cc9e41
- SHA256
  
  31b50a51c77f7afdb6b6c0e5e5ae4c20aa7b919613de09bed2ce278924af1c6b
- SHA512
  
  9693cf639f3dff342a79de6c7e71bf1fcc1ff8921bb8a840cf4cd2cf4eed1dae9fca9762d1c3df262dfbb033f17d2788860359630ad3a8dab681fdced02591d6
- SSDEEP
  
  3072:C4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4y:ZiI/PlY37ZLF4Ca6WABqBOvsy
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2