a3fedc10c9b21bb24ce5cc78bcc5f264bab0d306d10d6a73b57a7f53ebc0c22c | Triage

Sharing

General

Target

826dd0c1db8fa0b3017f16c594cf341f_JaffaCakes118
Size

165KB
Sample

241031-j8z32avcjd
MD5

826dd0c1db8fa0b3017f16c594cf341f
SHA1

c1b8baad2d3fa2aad0ffcf13c1a7d9266d049d67
SHA256

a3fedc10c9b21bb24ce5cc78bcc5f264bab0d306d10d6a73b57a7f53ebc0c22c
SHA512

9b09e685654e779e85d965e88d48553a5b416772cd84676090b18b0bb7516e631cc9435960289b99e12fef7a030ac9d6f94717dee124a2b00776e14bb46350bd
SSDEEP

3072:g4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:/iI/PlY37ZLF4Ca6WABqBOvs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  826dd0c1db8fa0b3017f16c594cf341f_JaffaCakes118
- Size
  
  165KB
- MD5
  
  826dd0c1db8fa0b3017f16c594cf341f
- SHA1
  
  c1b8baad2d3fa2aad0ffcf13c1a7d9266d049d67
- SHA256
  
  a3fedc10c9b21bb24ce5cc78bcc5f264bab0d306d10d6a73b57a7f53ebc0c22c
- SHA512
  
  9b09e685654e779e85d965e88d48553a5b416772cd84676090b18b0bb7516e631cc9435960289b99e12fef7a030ac9d6f94717dee124a2b00776e14bb46350bd
- SSDEEP
  
  3072:g4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:/iI/PlY37ZLF4Ca6WABqBOvs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2