e959e4ad003f8be832ae6907c0f6792a4ae35b45c8d99fd751b17e93dd5b466a | Triage

Sharing

General

Target

82751e307d52d70743386253bae7e63c_JaffaCakes118
Size

164KB
Sample

241031-kcmcqsvcre
MD5

82751e307d52d70743386253bae7e63c
SHA1

09f2a3fdd9f33d25e063bf205302dd62634c8b28
SHA256

e959e4ad003f8be832ae6907c0f6792a4ae35b45c8d99fd751b17e93dd5b466a
SHA512

6a84825289ce0120179ee65be1432fdc9252bfde39d509b1f78f7e4de9dafd518418816ee918c08653b8ede7abeb5ce7cc2525eb541cacb94096ea05a1311371
SSDEEP

3072:CiSVipBoNdGhm5P+0he9xagDexm6UJdme3HgrLpbPJG5hFl:9iilhmIQODDHBJdmOHIFs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  82751e307d52d70743386253bae7e63c_JaffaCakes118
- Size
  
  164KB
- MD5
  
  82751e307d52d70743386253bae7e63c
- SHA1
  
  09f2a3fdd9f33d25e063bf205302dd62634c8b28
- SHA256
  
  e959e4ad003f8be832ae6907c0f6792a4ae35b45c8d99fd751b17e93dd5b466a
- SHA512
  
  6a84825289ce0120179ee65be1432fdc9252bfde39d509b1f78f7e4de9dafd518418816ee918c08653b8ede7abeb5ce7cc2525eb541cacb94096ea05a1311371
- SSDEEP
  
  3072:CiSVipBoNdGhm5P+0he9xagDexm6UJdme3HgrLpbPJG5hFl:9iilhmIQODDHBJdmOHIFs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2