94790c4742e0a52c921fd06867d10d5a2862cfd29215031122c07d4820107ca8 | Triage

Sharing

General

Target

16197bb8d87e5f55e575821de9e88cfe_JaffaCakes118
Size

163KB
Sample

241005-eqx4hayfnb
MD5

16197bb8d87e5f55e575821de9e88cfe
SHA1

dd3e223f38ad9552eb14ae39e1d023e861e6819e
SHA256

94790c4742e0a52c921fd06867d10d5a2862cfd29215031122c07d4820107ca8
SHA512

32bb05752726ae9393d00691248079f91e483bf8c0025804689b6ea1116eb558c0b2c535ff6c709522591dc54e59f8c13ed62f9a8b62f0121e895b56a95ffe28
SSDEEP

3072:74HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4A:EiI/PlY37ZLF4Ca6WABqBOvsA

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  16197bb8d87e5f55e575821de9e88cfe_JaffaCakes118
- Size
  
  163KB
- MD5
  
  16197bb8d87e5f55e575821de9e88cfe
- SHA1
  
  dd3e223f38ad9552eb14ae39e1d023e861e6819e
- SHA256
  
  94790c4742e0a52c921fd06867d10d5a2862cfd29215031122c07d4820107ca8
- SHA512
  
  32bb05752726ae9393d00691248079f91e483bf8c0025804689b6ea1116eb558c0b2c535ff6c709522591dc54e59f8c13ed62f9a8b62f0121e895b56a95ffe28
- SSDEEP
  
  3072:74HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4A:EiI/PlY37ZLF4Ca6WABqBOvsA
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2