cbd5301e272f2c8b0986349e22897510a00a27fd0fefa3be6a319ed8e60512c6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

096cd0b5b1aaa7a3e744fb6b2738d150_JaffaCakes118
Size

165KB
Sample

241002-hp11jswfmc
MD5

096cd0b5b1aaa7a3e744fb6b2738d150
SHA1

a66c2d37a6887210a718177190da705ac023638a
SHA256

cbd5301e272f2c8b0986349e22897510a00a27fd0fefa3be6a319ed8e60512c6
SHA512

6ab7902db0657e086cdd0da36567c6df432ef59539c65012d17d4026afedc456113861e7d8dac72dce9348da645258dd2da26fcfdb1175cec3d13108f1502ae6
SSDEEP

3072:94HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4b:eiI/PlY37ZLF4Ca6WABqBOvs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  096cd0b5b1aaa7a3e744fb6b2738d150_JaffaCakes118
- Size
  
  165KB
- MD5
  
  096cd0b5b1aaa7a3e744fb6b2738d150
- SHA1
  
  a66c2d37a6887210a718177190da705ac023638a
- SHA256
  
  cbd5301e272f2c8b0986349e22897510a00a27fd0fefa3be6a319ed8e60512c6
- SHA512
  
  6ab7902db0657e086cdd0da36567c6df432ef59539c65012d17d4026afedc456113861e7d8dac72dce9348da645258dd2da26fcfdb1175cec3d13108f1502ae6
- SSDEEP
  
  3072:94HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4b:eiI/PlY37ZLF4Ca6WABqBOvs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2