532e20277c0444c9d60f2945254a73b8acb39f71df7d57f441dd3055f3766144 | Triage

Sharing

General

Target

b4e820feb7c8ffd260591d8f0341c846_JaffaCakes118
Size

165KB
Sample

241130-fp8paatnc1
MD5

b4e820feb7c8ffd260591d8f0341c846
SHA1

e03f88dc339642fd096867332902cad00af265ee
SHA256

532e20277c0444c9d60f2945254a73b8acb39f71df7d57f441dd3055f3766144
SHA512

412cb544fd28dd4cb4b01edf1658899fe5b4db6d7f38816b072ac5c24631d69edac223606e0fd5df9edd32d3e70922191ac94a5ff9fb8f36eb90763761b05267
SSDEEP

3072:84HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez43:TiI/PlY37ZLF4Ca6WABqBOvs3

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b4e820feb7c8ffd260591d8f0341c846_JaffaCakes118
- Size
  
  165KB
- MD5
  
  b4e820feb7c8ffd260591d8f0341c846
- SHA1
  
  e03f88dc339642fd096867332902cad00af265ee
- SHA256
  
  532e20277c0444c9d60f2945254a73b8acb39f71df7d57f441dd3055f3766144
- SHA512
  
  412cb544fd28dd4cb4b01edf1658899fe5b4db6d7f38816b072ac5c24631d69edac223606e0fd5df9edd32d3e70922191ac94a5ff9fb8f36eb90763761b05267
- SSDEEP
  
  3072:84HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez43:TiI/PlY37ZLF4Ca6WABqBOvs3
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2