ab0495e21909d30ee61bc3eb024e745a5ba67b981677805b8ed2fab359f89aee | Triage

Sharing

General

Target

4276e46d2fc9f1eb09402be2c4eea02f_JaffaCakes118
Size

163KB
Sample

241014-p8g54swfng
MD5

4276e46d2fc9f1eb09402be2c4eea02f
SHA1

9cf927bfb4349ec5f7be9af6c439e12d21f04753
SHA256

ab0495e21909d30ee61bc3eb024e745a5ba67b981677805b8ed2fab359f89aee
SHA512

edeec76527b3fcbde4f76e624041b521b36e6166849f01181dc47eea0e4221aaf7f71d19aa7374a618aa03ade0daff9beb14d7ceb78c1ab23ef4dcf1e02d2fd2
SSDEEP

3072:74HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4n+:EiI/PlY37ZLF4Ca6WABqBOvs+

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  4276e46d2fc9f1eb09402be2c4eea02f_JaffaCakes118
- Size
  
  163KB
- MD5
  
  4276e46d2fc9f1eb09402be2c4eea02f
- SHA1
  
  9cf927bfb4349ec5f7be9af6c439e12d21f04753
- SHA256
  
  ab0495e21909d30ee61bc3eb024e745a5ba67b981677805b8ed2fab359f89aee
- SHA512
  
  edeec76527b3fcbde4f76e624041b521b36e6166849f01181dc47eea0e4221aaf7f71d19aa7374a618aa03ade0daff9beb14d7ceb78c1ab23ef4dcf1e02d2fd2
- SSDEEP
  
  3072:74HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4n+:EiI/PlY37ZLF4Ca6WABqBOvs+
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2