b03a0891758ca1ea2aa3f9042f59c821afc1838c9532197151e45686279fb299 | Triage

Sharing

General

Target

0d723e7435617a18895e8b17f20929ae_JaffaCakes118
Size

163KB
Sample

241003-cnvjgsshrg
MD5

0d723e7435617a18895e8b17f20929ae
SHA1

08a4e8562434e0f0bb24e662d5fa9083b34a4ba5
SHA256

b03a0891758ca1ea2aa3f9042f59c821afc1838c9532197151e45686279fb299
SHA512

6912534dc64927466f74b2877ee9815d86d6023c669520f6b935eb40899c67fcc4a07b5b09a142e91999ce9be86106a186fc345bb705c5706b6089312ac09fb5
SSDEEP

3072:M4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4h:DiI/PlY37ZLF4Ca6WABqBOvsh

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  0d723e7435617a18895e8b17f20929ae_JaffaCakes118
- Size
  
  163KB
- MD5
  
  0d723e7435617a18895e8b17f20929ae
- SHA1
  
  08a4e8562434e0f0bb24e662d5fa9083b34a4ba5
- SHA256
  
  b03a0891758ca1ea2aa3f9042f59c821afc1838c9532197151e45686279fb299
- SHA512
  
  6912534dc64927466f74b2877ee9815d86d6023c669520f6b935eb40899c67fcc4a07b5b09a142e91999ce9be86106a186fc345bb705c5706b6089312ac09fb5
- SSDEEP
  
  3072:M4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4h:DiI/PlY37ZLF4Ca6WABqBOvsh
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2