e43c0ef78badc56f45291f7c90fb449119822021ff2599c1409bdb35faa9faf3 | Triage

Sharing

General

Target

08401e3446c896125cd1c25cdad110e5_JaffaCakes118
Size

165KB
Sample

241002-bt5e7stgmf
MD5

08401e3446c896125cd1c25cdad110e5
SHA1

a7d7da4afa11faa649a34312c113db549205490c
SHA256

e43c0ef78badc56f45291f7c90fb449119822021ff2599c1409bdb35faa9faf3
SHA512

640962a4a0cc5ee94437aea35da6511e292d6388bfbc59ad6faea131cbc94ca086bfc28f44cee50f503331a4263570ff2bb9631186784693f0454de16883dd39
SSDEEP

3072:X4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:IiI/PlY37ZLF4Ca6WABqBOvs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  08401e3446c896125cd1c25cdad110e5_JaffaCakes118
- Size
  
  165KB
- MD5
  
  08401e3446c896125cd1c25cdad110e5
- SHA1
  
  a7d7da4afa11faa649a34312c113db549205490c
- SHA256
  
  e43c0ef78badc56f45291f7c90fb449119822021ff2599c1409bdb35faa9faf3
- SHA512
  
  640962a4a0cc5ee94437aea35da6511e292d6388bfbc59ad6faea131cbc94ca086bfc28f44cee50f503331a4263570ff2bb9631186784693f0454de16883dd39
- SSDEEP
  
  3072:X4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:IiI/PlY37ZLF4Ca6WABqBOvs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2