7f016bd34947ed95fc8ee580411581af1e2d90b6919f55909b6857a724aea629 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54c6bd5bb1080e7cf7ced8f1dd807344_JaffaCakes118
Size

165KB
Sample

241018-b3teassank
MD5

54c6bd5bb1080e7cf7ced8f1dd807344
SHA1

cdc77c1073f234708a66d8f56e29253e7d1a60fd
SHA256

7f016bd34947ed95fc8ee580411581af1e2d90b6919f55909b6857a724aea629
SHA512

edeb1798317f9a8c5e7ca0e01bc60a9404eec19cca385806a3496f064617a68660263ee08a5e153e07fb96ae02cb867c3c99bcae4a4c2457573939cc3f38cdb1
SSDEEP

3072:g4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:/iI/PlY37ZLF4Ca6WABqBOvs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  54c6bd5bb1080e7cf7ced8f1dd807344_JaffaCakes118
- Size
  
  165KB
- MD5
  
  54c6bd5bb1080e7cf7ced8f1dd807344
- SHA1
  
  cdc77c1073f234708a66d8f56e29253e7d1a60fd
- SHA256
  
  7f016bd34947ed95fc8ee580411581af1e2d90b6919f55909b6857a724aea629
- SHA512
  
  edeb1798317f9a8c5e7ca0e01bc60a9404eec19cca385806a3496f064617a68660263ee08a5e153e07fb96ae02cb867c3c99bcae4a4c2457573939cc3f38cdb1
- SSDEEP
  
  3072:g4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:/iI/PlY37ZLF4Ca6WABqBOvs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2