50a9e16844dc8b270e4b8bd6ffcd974abe5b3e8d53558cae05fc085e5067cef7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

185196d24c8b9515a72a15490e078361_JaffaCakes118
Size

165KB
Sample

241006-qztm8awhmp
MD5

185196d24c8b9515a72a15490e078361
SHA1

f6a8f065c42fde4f6a83986d015fcc2a15697903
SHA256

50a9e16844dc8b270e4b8bd6ffcd974abe5b3e8d53558cae05fc085e5067cef7
SHA512

dc1fe6a0bcf063b23476c57969f39c3efd5aa306df606004716b925223c02b4c054b1fe0b30e9012c21a1b6732fc91be3914029f7a522dd76998df9f1f774f73
SSDEEP

3072:T4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:siI/PlY37ZLF4Ca6WABqBOvs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  185196d24c8b9515a72a15490e078361_JaffaCakes118
- Size
  
  165KB
- MD5
  
  185196d24c8b9515a72a15490e078361
- SHA1
  
  f6a8f065c42fde4f6a83986d015fcc2a15697903
- SHA256
  
  50a9e16844dc8b270e4b8bd6ffcd974abe5b3e8d53558cae05fc085e5067cef7
- SHA512
  
  dc1fe6a0bcf063b23476c57969f39c3efd5aa306df606004716b925223c02b4c054b1fe0b30e9012c21a1b6732fc91be3914029f7a522dd76998df9f1f774f73
- SSDEEP
  
  3072:T4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:siI/PlY37ZLF4Ca6WABqBOvs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2