7d4ef6ec21fceef9df23e212c4493284329e22b4211c8108ab8feabb9e3aaa49 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08658013bbb02afa7b106ba7ee4fd3b9_JaffaCakes118
Size

165KB
Sample

241002-cnlatasbmk
MD5

08658013bbb02afa7b106ba7ee4fd3b9
SHA1

3ba665e264e007fafaf85684bf1beb25a96ba30d
SHA256

7d4ef6ec21fceef9df23e212c4493284329e22b4211c8108ab8feabb9e3aaa49
SHA512

68dbfeccc56cca74887f250907426276431bc7935cc5b588a615f4dba4a4186f3adeda4991755911d28320f58f510462a747c987ef370f9170d4c689668942aa
SSDEEP

3072:u4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:diI/PlY37ZLF4Ca6WABqBOvs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  08658013bbb02afa7b106ba7ee4fd3b9_JaffaCakes118
- Size
  
  165KB
- MD5
  
  08658013bbb02afa7b106ba7ee4fd3b9
- SHA1
  
  3ba665e264e007fafaf85684bf1beb25a96ba30d
- SHA256
  
  7d4ef6ec21fceef9df23e212c4493284329e22b4211c8108ab8feabb9e3aaa49
- SHA512
  
  68dbfeccc56cca74887f250907426276431bc7935cc5b588a615f4dba4a4186f3adeda4991755911d28320f58f510462a747c987ef370f9170d4c689668942aa
- SSDEEP
  
  3072:u4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:diI/PlY37ZLF4Ca6WABqBOvs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2