4c00703b0d4418d94353de33855c14e44188c657d23ee92f2a3992666740ebba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

377d0b66f28dae2efc74e9ae784a0408_JaffaCakes118
Size

164KB
Sample

241012-ada1zs1gme
MD5

377d0b66f28dae2efc74e9ae784a0408
SHA1

294854d619e59a2115232d1dc1380d48d211c9b8
SHA256

4c00703b0d4418d94353de33855c14e44188c657d23ee92f2a3992666740ebba
SHA512

d600f0a31cf93fd1e5993a5e50f7087a7af1f06a15c5880ae6aa8a8d700fadf258340c2e1f632c73acb208ce040bcd7fc38daffaeda6fd386bf8702f467350f3
SSDEEP

3072:riSVipBoNdGhm5P+0he9xagDexm6UJdme3HgrLpbPJG5h:2iilhmIQODDHBJdmOHIFs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  377d0b66f28dae2efc74e9ae784a0408_JaffaCakes118
- Size
  
  164KB
- MD5
  
  377d0b66f28dae2efc74e9ae784a0408
- SHA1
  
  294854d619e59a2115232d1dc1380d48d211c9b8
- SHA256
  
  4c00703b0d4418d94353de33855c14e44188c657d23ee92f2a3992666740ebba
- SHA512
  
  d600f0a31cf93fd1e5993a5e50f7087a7af1f06a15c5880ae6aa8a8d700fadf258340c2e1f632c73acb208ce040bcd7fc38daffaeda6fd386bf8702f467350f3
- SSDEEP
  
  3072:riSVipBoNdGhm5P+0he9xagDexm6UJdme3HgrLpbPJG5h:2iilhmIQODDHBJdmOHIFs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2