a14d0b52c59f2e9179c946b371df805b3656e47c52d37b80d5250aa06f2bbf95 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40db53bee8ddf5401c710ce668675b2e_JaffaCakes118
Size

165KB
Sample

241013-ttrs8azfmm
MD5

40db53bee8ddf5401c710ce668675b2e
SHA1

fc039f9acba3baa7dad55e1b8def58c1c7c42d5b
SHA256

a14d0b52c59f2e9179c946b371df805b3656e47c52d37b80d5250aa06f2bbf95
SHA512

51a34435461b009f733b975aa4dcc16f21b2e6eb68eec761aff0ae482d37a99119a4d5c2f2a1be3e41909213bde2806caadc398ed0d88e82442776c6906c5dad
SSDEEP

3072:R4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:aiI/PlY37ZLF4Ca6WABqBOvs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  40db53bee8ddf5401c710ce668675b2e_JaffaCakes118
- Size
  
  165KB
- MD5
  
  40db53bee8ddf5401c710ce668675b2e
- SHA1
  
  fc039f9acba3baa7dad55e1b8def58c1c7c42d5b
- SHA256
  
  a14d0b52c59f2e9179c946b371df805b3656e47c52d37b80d5250aa06f2bbf95
- SHA512
  
  51a34435461b009f733b975aa4dcc16f21b2e6eb68eec761aff0ae482d37a99119a4d5c2f2a1be3e41909213bde2806caadc398ed0d88e82442776c6906c5dad
- SSDEEP
  
  3072:R4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:aiI/PlY37ZLF4Ca6WABqBOvs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2