2c64c3b66e1e91c1aab83e30095b43b9cb2dd9c4aa8402748dfbb1ad533cc5ce | Triage

Sharing

General

Target

1344e60ea3b75e8574e695bf6bd5878e_JaffaCakes118
Size

165KB
Sample

241004-n5fmfaxaka
MD5

1344e60ea3b75e8574e695bf6bd5878e
SHA1

6e2a2bf49fbe24ff30d006220efcf1a81d7331bf
SHA256

2c64c3b66e1e91c1aab83e30095b43b9cb2dd9c4aa8402748dfbb1ad533cc5ce
SHA512

1a439ed8bcd4ce90202f1698036eede9e2ac72470710c512e348769e26eae294e8a084db1b07790fc083afd83e8d81358e0899fc0fb84a0da3cacde68a79112a
SSDEEP

3072:G4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:liI/PlY37ZLF4Ca6WABqBOvs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  1344e60ea3b75e8574e695bf6bd5878e_JaffaCakes118
- Size
  
  165KB
- MD5
  
  1344e60ea3b75e8574e695bf6bd5878e
- SHA1
  
  6e2a2bf49fbe24ff30d006220efcf1a81d7331bf
- SHA256
  
  2c64c3b66e1e91c1aab83e30095b43b9cb2dd9c4aa8402748dfbb1ad533cc5ce
- SHA512
  
  1a439ed8bcd4ce90202f1698036eede9e2ac72470710c512e348769e26eae294e8a084db1b07790fc083afd83e8d81358e0899fc0fb84a0da3cacde68a79112a
- SSDEEP
  
  3072:G4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:liI/PlY37ZLF4Ca6WABqBOvs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2