9259997265657a0cfd57ecfebc814897897860ad6b43c0f3f58bcd84d8544b34 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

563ec975183dbb92c0442b1a7557172f_JaffaCakes118
Size

165KB
Sample

241018-jms3lavfkh
MD5

563ec975183dbb92c0442b1a7557172f
SHA1

afa7d64e4155d68a40657358e25aaef3f24d65e1
SHA256

9259997265657a0cfd57ecfebc814897897860ad6b43c0f3f58bcd84d8544b34
SHA512

3eb68618ccb4f57ccec15d7890f99bed5a0381faef272ddbdf93d4c59581ce3feeb6d144ec93a2964608d883c46204f54d82612e7050be7553196ce0fc3bfc11
SSDEEP

3072:X4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:IiI/PlY37ZLF4Ca6WABqBOvs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  563ec975183dbb92c0442b1a7557172f_JaffaCakes118
- Size
  
  165KB
- MD5
  
  563ec975183dbb92c0442b1a7557172f
- SHA1
  
  afa7d64e4155d68a40657358e25aaef3f24d65e1
- SHA256
  
  9259997265657a0cfd57ecfebc814897897860ad6b43c0f3f58bcd84d8544b34
- SHA512
  
  3eb68618ccb4f57ccec15d7890f99bed5a0381faef272ddbdf93d4c59581ce3feeb6d144ec93a2964608d883c46204f54d82612e7050be7553196ce0fc3bfc11
- SSDEEP
  
  3072:X4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:IiI/PlY37ZLF4Ca6WABqBOvs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2