3340353ce77e97bd081b3c57624d3837be70b910204ff1f0324e9ccabba7c4a5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16d96804c5c520766417ba0bc507f168_JaffaCakes118
Size

165KB
Sample

241005-jx31jsvamm
MD5

16d96804c5c520766417ba0bc507f168
SHA1

41614880bccbbf5a233135c34252e560174f86fd
SHA256

3340353ce77e97bd081b3c57624d3837be70b910204ff1f0324e9ccabba7c4a5
SHA512

ee3d412bdb35974dd1fc8ee27b6a7e7ce741a160ee5407b10e9f8cfd92662d50c229a4f6bcfcf2ca903d3867e32c9507500df24c9c79ff09913965a19df932c2
SSDEEP

3072:34HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:oiI/PlY37ZLF4Ca6WABqBOvs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  16d96804c5c520766417ba0bc507f168_JaffaCakes118
- Size
  
  165KB
- MD5
  
  16d96804c5c520766417ba0bc507f168
- SHA1
  
  41614880bccbbf5a233135c34252e560174f86fd
- SHA256
  
  3340353ce77e97bd081b3c57624d3837be70b910204ff1f0324e9ccabba7c4a5
- SHA512
  
  ee3d412bdb35974dd1fc8ee27b6a7e7ce741a160ee5407b10e9f8cfd92662d50c229a4f6bcfcf2ca903d3867e32c9507500df24c9c79ff09913965a19df932c2
- SSDEEP
  
  3072:34HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:oiI/PlY37ZLF4Ca6WABqBOvs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2