fca5a4e401bcb81ce4b75d67286d5543f3795ed10803ff44cd158c6e547abc55 | Triage

Sharing

General

Target

38c7043e76670a2e82faefaf2efda4c9_JaffaCakes118
Size

163KB
Sample

241012-gy3eassbkp
MD5

38c7043e76670a2e82faefaf2efda4c9
SHA1

8c0b8e1ad4a071aa5bcd6362a2fd77171e67d3ce
SHA256

fca5a4e401bcb81ce4b75d67286d5543f3795ed10803ff44cd158c6e547abc55
SHA512

63c2cfdba5cf69db815e048cb97903864cbfd07a1f46d0e0d665336e50fed5f38fca2c22c739e7aa5b66436a24f4d7f720170fa5a798ac40dd41708c8c21357e
SSDEEP

3072:QlvwBHTzutP2cukIIIBKVeF5/w6ikRgfc:QlIBH2sczH0KVeFi6i6

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  38c7043e76670a2e82faefaf2efda4c9_JaffaCakes118
- Size
  
  163KB
- MD5
  
  38c7043e76670a2e82faefaf2efda4c9
- SHA1
  
  8c0b8e1ad4a071aa5bcd6362a2fd77171e67d3ce
- SHA256
  
  fca5a4e401bcb81ce4b75d67286d5543f3795ed10803ff44cd158c6e547abc55
- SHA512
  
  63c2cfdba5cf69db815e048cb97903864cbfd07a1f46d0e0d665336e50fed5f38fca2c22c739e7aa5b66436a24f4d7f720170fa5a798ac40dd41708c8c21357e
- SSDEEP
  
  3072:QlvwBHTzutP2cukIIIBKVeF5/w6ikRgfc:QlIBH2sczH0KVeFi6i6
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2