11f9272598e61beeb7b49282fc90670d4201bcf00675ec93efa0cc466094a00e | Triage

Sharing

General

Target

0c4ccb81b5ad600a35d88559961e631b_JaffaCakes118
Size

165KB
Sample

241002-yy27zavanl
MD5

0c4ccb81b5ad600a35d88559961e631b
SHA1

f81d1524d90b2077ff680100188e4d285b0b508e
SHA256

11f9272598e61beeb7b49282fc90670d4201bcf00675ec93efa0cc466094a00e
SHA512

201fabb614a1786c6b31514e5fd15634a7dd4fd32765e383fa12468bb355979f873de99ddd67069a33ffcc252d167e59203e22fc2ca093b82099f8d71f859dca
SSDEEP

3072:p4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:iiI/PlY37ZLF4Ca6WABqBOvs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  0c4ccb81b5ad600a35d88559961e631b_JaffaCakes118
- Size
  
  165KB
- MD5
  
  0c4ccb81b5ad600a35d88559961e631b
- SHA1
  
  f81d1524d90b2077ff680100188e4d285b0b508e
- SHA256
  
  11f9272598e61beeb7b49282fc90670d4201bcf00675ec93efa0cc466094a00e
- SHA512
  
  201fabb614a1786c6b31514e5fd15634a7dd4fd32765e383fa12468bb355979f873de99ddd67069a33ffcc252d167e59203e22fc2ca093b82099f8d71f859dca
- SSDEEP
  
  3072:p4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:iiI/PlY37ZLF4Ca6WABqBOvs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2