7b3594911ce2405f0856bcaffd1f0117b4e35d66ebd3f66d861a6e6ce9fd8ee0 | Triage

Sharing

General

Target

37a65f95fb4a5c5ccb69a6ab59827937_JaffaCakes118
Size

165KB
Sample

241012-a6whdsxgjn
MD5

37a65f95fb4a5c5ccb69a6ab59827937
SHA1

eeb66a35190ce587502cd1b1d780f674ea01e010
SHA256

7b3594911ce2405f0856bcaffd1f0117b4e35d66ebd3f66d861a6e6ce9fd8ee0
SHA512

05bf125294a58020cefe769f2c2aacf6d0c16ec7db0b973ce5979f9e1673a729f45fac305f6ec1f6d587b3aee3c1fa965089db79b24bdcce607b9ddaa88788a6
SSDEEP

3072:R4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:aiI/PlY37ZLF4Ca6WABqBOvs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  37a65f95fb4a5c5ccb69a6ab59827937_JaffaCakes118
- Size
  
  165KB
- MD5
  
  37a65f95fb4a5c5ccb69a6ab59827937
- SHA1
  
  eeb66a35190ce587502cd1b1d780f674ea01e010
- SHA256
  
  7b3594911ce2405f0856bcaffd1f0117b4e35d66ebd3f66d861a6e6ce9fd8ee0
- SHA512
  
  05bf125294a58020cefe769f2c2aacf6d0c16ec7db0b973ce5979f9e1673a729f45fac305f6ec1f6d587b3aee3c1fa965089db79b24bdcce607b9ddaa88788a6
- SSDEEP
  
  3072:R4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:aiI/PlY37ZLF4Ca6WABqBOvs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2