2f7cce5825c7b7111cdc761e9ad22987a1868998d4170102cbda15a109570c4f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2578699b9c7718fa986cd4b5ed3f21cb_JaffaCakes118
Size

163KB
Sample

241008-zysh7swglr
MD5

2578699b9c7718fa986cd4b5ed3f21cb
SHA1

ac727664b599ac23dfb76a8083001d853afc804a
SHA256

2f7cce5825c7b7111cdc761e9ad22987a1868998d4170102cbda15a109570c4f
SHA512

1576f6d03be5e80d00e7df33ed3522f9a3ce83eaf3fdb9233264cf65c42bab6556505cf03e18f6d4119893c525686b4f3c3e57ac0c19a294d5eb8e1b6427aed9
SSDEEP

3072:O4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4YeV:9iI/PlY37ZLF4Ca6WABqBOvsJ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2578699b9c7718fa986cd4b5ed3f21cb_JaffaCakes118
- Size
  
  163KB
- MD5
  
  2578699b9c7718fa986cd4b5ed3f21cb
- SHA1
  
  ac727664b599ac23dfb76a8083001d853afc804a
- SHA256
  
  2f7cce5825c7b7111cdc761e9ad22987a1868998d4170102cbda15a109570c4f
- SHA512
  
  1576f6d03be5e80d00e7df33ed3522f9a3ce83eaf3fdb9233264cf65c42bab6556505cf03e18f6d4119893c525686b4f3c3e57ac0c19a294d5eb8e1b6427aed9
- SSDEEP
  
  3072:O4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4YeV:9iI/PlY37ZLF4Ca6WABqBOvsJ
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2