e391854cb3e29463ac1cda5e4d0feaee4b079b914b0394b7c58b17d9c412dd74 | Triage

Sharing

General

Target

0d3a49a7bfd8a9c9f45f731498a0dd66_JaffaCakes118
Size

165KB
Sample

241003-bfz9bszerh
MD5

0d3a49a7bfd8a9c9f45f731498a0dd66
SHA1

f852770ff1272a6972d2bfffc6a927da831d9049
SHA256

e391854cb3e29463ac1cda5e4d0feaee4b079b914b0394b7c58b17d9c412dd74
SHA512

59c18f1149414e6f5f778e0521e8ee5603ff7b58e5d4ab5c91f994d0af38730091b0b6e010232a09be9d5174751cefb75c1298d777cbf27d720f1112b0f903de
SSDEEP

3072:g4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:/iI/PlY37ZLF4Ca6WABqBOvs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  0d3a49a7bfd8a9c9f45f731498a0dd66_JaffaCakes118
- Size
  
  165KB
- MD5
  
  0d3a49a7bfd8a9c9f45f731498a0dd66
- SHA1
  
  f852770ff1272a6972d2bfffc6a927da831d9049
- SHA256
  
  e391854cb3e29463ac1cda5e4d0feaee4b079b914b0394b7c58b17d9c412dd74
- SHA512
  
  59c18f1149414e6f5f778e0521e8ee5603ff7b58e5d4ab5c91f994d0af38730091b0b6e010232a09be9d5174751cefb75c1298d777cbf27d720f1112b0f903de
- SSDEEP
  
  3072:g4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:/iI/PlY37ZLF4Ca6WABqBOvs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2