2f25dfe06b2c1606163a8acd9acd64334a3aa1b0e5310e087291b92826ed54a3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c60c8c48e72e718a8387811d0b3f956_JaffaCakes118
Size

165KB
Sample

241012-2hgswavemh
MD5

3c60c8c48e72e718a8387811d0b3f956
SHA1

0d2838bd1ebebadcb2fe7450619a00b6b7e2b3a8
SHA256

2f25dfe06b2c1606163a8acd9acd64334a3aa1b0e5310e087291b92826ed54a3
SHA512

2c5aaa3ebe96c237bd4e5b493808ee1d6eac4fda4481aa03bf825ff546df8548d08f80d2d0311ea0676c81e25798d462efafbb854b6db093194d59c78ba5d883
SSDEEP

3072:x4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:6iI/PlY37ZLF4Ca6WABqBOvs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  3c60c8c48e72e718a8387811d0b3f956_JaffaCakes118
- Size
  
  165KB
- MD5
  
  3c60c8c48e72e718a8387811d0b3f956
- SHA1
  
  0d2838bd1ebebadcb2fe7450619a00b6b7e2b3a8
- SHA256
  
  2f25dfe06b2c1606163a8acd9acd64334a3aa1b0e5310e087291b92826ed54a3
- SHA512
  
  2c5aaa3ebe96c237bd4e5b493808ee1d6eac4fda4481aa03bf825ff546df8548d08f80d2d0311ea0676c81e25798d462efafbb854b6db093194d59c78ba5d883
- SSDEEP
  
  3072:x4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:6iI/PlY37ZLF4Ca6WABqBOvs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2