334014d77063f9c21d6d32c982aec6be74e189a181ee10a9ac8303fdb84f09fe | Triage

Sharing

General

Target

134dcef774422d3075661eaae5ecf82e_JaffaCakes118
Size

165KB
Sample

241004-pa62ksxcra
MD5

134dcef774422d3075661eaae5ecf82e
SHA1

c0daa0d0a5e7ea72441c3ffd0e4f4c7802a056c2
SHA256

334014d77063f9c21d6d32c982aec6be74e189a181ee10a9ac8303fdb84f09fe
SHA512

afb9ca1433502948b0b147340c3c53580ef96b3efe22a159fee488cc44b66eb79b087797ffd370d3f3d1bb3861e0aa75a3c6397d52feedaa9c006cd61550079d
SSDEEP

3072:v4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:wiI/PlY37ZLF4Ca6WABqBOvs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  134dcef774422d3075661eaae5ecf82e_JaffaCakes118
- Size
  
  165KB
- MD5
  
  134dcef774422d3075661eaae5ecf82e
- SHA1
  
  c0daa0d0a5e7ea72441c3ffd0e4f4c7802a056c2
- SHA256
  
  334014d77063f9c21d6d32c982aec6be74e189a181ee10a9ac8303fdb84f09fe
- SHA512
  
  afb9ca1433502948b0b147340c3c53580ef96b3efe22a159fee488cc44b66eb79b087797ffd370d3f3d1bb3861e0aa75a3c6397d52feedaa9c006cd61550079d
- SSDEEP
  
  3072:v4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:wiI/PlY37ZLF4Ca6WABqBOvs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2