d1e2c681a085e72a8f3760de17583b1719d27ead024c0ac389fd14255c90e080 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5754cca2297b6530abc66a0bf4c77a6f_JaffaCakes118
Size

165KB
Sample

241018-n7nqtsybrr
MD5

5754cca2297b6530abc66a0bf4c77a6f
SHA1

4b9f528a63567681215200aa3bda2ce55f78f2c3
SHA256

d1e2c681a085e72a8f3760de17583b1719d27ead024c0ac389fd14255c90e080
SHA512

0bb5182da0267db4efed32c83237f2ed0a51c2f95f711155194e076c819d96478cac0ab18b181840b232b4306fc039a06b369de17f4b500d4f365dd7f78f863d
SSDEEP

3072:34HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4r:oiI/PlY37ZLF4Ca6WABqBOvsr

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  5754cca2297b6530abc66a0bf4c77a6f_JaffaCakes118
- Size
  
  165KB
- MD5
  
  5754cca2297b6530abc66a0bf4c77a6f
- SHA1
  
  4b9f528a63567681215200aa3bda2ce55f78f2c3
- SHA256
  
  d1e2c681a085e72a8f3760de17583b1719d27ead024c0ac389fd14255c90e080
- SHA512
  
  0bb5182da0267db4efed32c83237f2ed0a51c2f95f711155194e076c819d96478cac0ab18b181840b232b4306fc039a06b369de17f4b500d4f365dd7f78f863d
- SSDEEP
  
  3072:34HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4r:oiI/PlY37ZLF4Ca6WABqBOvsr
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2