8ef7eeced8dc8f6cf9fa36b4ac56b01ac721291e3b16af6798cf81a3549e4aba | Triage

Sharing

General

Target

2b95965d957b0b7d2c05266c3a018662_JaffaCakes118
Size

165KB
Sample

241009-f1qb3swgja
MD5

2b95965d957b0b7d2c05266c3a018662
SHA1

5d4ab9f00398f6d6cf7e6ad6736723cf4c19f8a6
SHA256

8ef7eeced8dc8f6cf9fa36b4ac56b01ac721291e3b16af6798cf81a3549e4aba
SHA512

0b3e7a44030b77119427e853286bcf0a13faf88f46018a4dfc98cbff813a1993db297df5e4f3d1cad5f127bbf6b8de04a7efca78183165412fda92c8df80b4e1
SSDEEP

3072:Y4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:HiI/PlY37ZLF4Ca6WABqBOvs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2b95965d957b0b7d2c05266c3a018662_JaffaCakes118
- Size
  
  165KB
- MD5
  
  2b95965d957b0b7d2c05266c3a018662
- SHA1
  
  5d4ab9f00398f6d6cf7e6ad6736723cf4c19f8a6
- SHA256
  
  8ef7eeced8dc8f6cf9fa36b4ac56b01ac721291e3b16af6798cf81a3549e4aba
- SHA512
  
  0b3e7a44030b77119427e853286bcf0a13faf88f46018a4dfc98cbff813a1993db297df5e4f3d1cad5f127bbf6b8de04a7efca78183165412fda92c8df80b4e1
- SSDEEP
  
  3072:Y4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:HiI/PlY37ZLF4Ca6WABqBOvs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2