4e00366b2ccefea7d19858a52250e099913285dd9c0a270f31d46397fd39ede5 | Triage

Sharing

General

Target

083dc5dd37e9a9aab35bb2b66b6b40ce_JaffaCakes118
Size

165KB
Sample

241002-bsnfaszflp
MD5

083dc5dd37e9a9aab35bb2b66b6b40ce
SHA1

bc093c72cc4df05964c0b4c0653ee90f6298bec6
SHA256

4e00366b2ccefea7d19858a52250e099913285dd9c0a270f31d46397fd39ede5
SHA512

05d8cb2c10c0cae2618697c351f02e7076571f19a09f72bf70fc9c73290bc199c14518e5ebe9245b309694bcb94dcd44727072904d1e6591691d5d7ca7d6eb10
SSDEEP

3072:I4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:XiI/PlY37ZLF4Ca6WABqBOvs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  083dc5dd37e9a9aab35bb2b66b6b40ce_JaffaCakes118
- Size
  
  165KB
- MD5
  
  083dc5dd37e9a9aab35bb2b66b6b40ce
- SHA1
  
  bc093c72cc4df05964c0b4c0653ee90f6298bec6
- SHA256
  
  4e00366b2ccefea7d19858a52250e099913285dd9c0a270f31d46397fd39ede5
- SHA512
  
  05d8cb2c10c0cae2618697c351f02e7076571f19a09f72bf70fc9c73290bc199c14518e5ebe9245b309694bcb94dcd44727072904d1e6591691d5d7ca7d6eb10
- SSDEEP
  
  3072:I4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:XiI/PlY37ZLF4Ca6WABqBOvs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2