24916486a5a5cc57b5a6b9e9958e8c22b1be3bb94e369b2678258d96aecb8ba4 | Triage

Sharing

General

Target

1771ba439a826e9f2951e799d35ba475_JaffaCakes118
Size

497KB
Sample

241005-m9ys5swakh
MD5

1771ba439a826e9f2951e799d35ba475
SHA1

17eb29c98916d2a341ea027e6eaac44ddd1b0252
SHA256

24916486a5a5cc57b5a6b9e9958e8c22b1be3bb94e369b2678258d96aecb8ba4
SHA512

03e5771c6f1844a513f69b663c32c58de1916f6a7128fab8a985b6f68024d414b0c4f15b7979471a541bc7495318fe3e2db6baec638d9e44eae612e86a8b434f
SSDEEP

6144:lZuuObR8sVImcyYm/gUIJSSXZhdcTvMDPvvouX/gM93IgGVFBkQcn9XhptwSkt/C:aV+mzFIJnZhdcT0jTwBk79n+SIEkBXxu

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  1771ba439a826e9f2951e799d35ba475_JaffaCakes118
- Size
  
  497KB
- MD5
  
  1771ba439a826e9f2951e799d35ba475
- SHA1
  
  17eb29c98916d2a341ea027e6eaac44ddd1b0252
- SHA256
  
  24916486a5a5cc57b5a6b9e9958e8c22b1be3bb94e369b2678258d96aecb8ba4
- SHA512
  
  03e5771c6f1844a513f69b663c32c58de1916f6a7128fab8a985b6f68024d414b0c4f15b7979471a541bc7495318fe3e2db6baec638d9e44eae612e86a8b434f
- SSDEEP
  
  6144:lZuuObR8sVImcyYm/gUIJSSXZhdcTvMDPvvouX/gM93IgGVFBkQcn9XhptwSkt/C:aV+mzFIJnZhdcT0jTwBk79n+SIEkBXxu
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2