f4d35f2ba1f963760b5e686eda017133e9c2133dad0bf8e1e74a36ad70db08ed | Triage

Sharing

General

Target

09839467177cc3adcbd947f25557c2ae_JaffaCakes118
Size

165KB
Sample

241002-h53t3stekl
MD5

09839467177cc3adcbd947f25557c2ae
SHA1

d26d1329cb42205c703d1670edaff0684f87dfff
SHA256

f4d35f2ba1f963760b5e686eda017133e9c2133dad0bf8e1e74a36ad70db08ed
SHA512

8ddaad6ae0ccd0967cec97ec10a89fcfa9504e267b61dcc2fa4acc3d17066b1a2761c4276ba3721f6d97fb790e3305be3e66e20ee58224997e01c165567138db
SSDEEP

3072:x4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:6iI/PlY37ZLF4Ca6WABqBOvs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  09839467177cc3adcbd947f25557c2ae_JaffaCakes118
- Size
  
  165KB
- MD5
  
  09839467177cc3adcbd947f25557c2ae
- SHA1
  
  d26d1329cb42205c703d1670edaff0684f87dfff
- SHA256
  
  f4d35f2ba1f963760b5e686eda017133e9c2133dad0bf8e1e74a36ad70db08ed
- SHA512
  
  8ddaad6ae0ccd0967cec97ec10a89fcfa9504e267b61dcc2fa4acc3d17066b1a2761c4276ba3721f6d97fb790e3305be3e66e20ee58224997e01c165567138db
- SSDEEP
  
  3072:x4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:6iI/PlY37ZLF4Ca6WABqBOvs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2