936e9081f817f806f3bb2206a24c098308b6557f08b2b57ee13291d05c65ce6a | Triage

Sharing

General

Target

b4e93a84065f80b095edd67f9f79c6bf_JaffaCakes118
Size

165KB
Sample

241130-fqzg1aykem
MD5

b4e93a84065f80b095edd67f9f79c6bf
SHA1

031836ec4f6b7aa3f40f15cae7075c7d8038de37
SHA256

936e9081f817f806f3bb2206a24c098308b6557f08b2b57ee13291d05c65ce6a
SHA512

8e1c95ee9cb6cd347785cbf8c1833607a06ee923fbb039d45be2f92d8906f241c383b9ee67b02833b616f184756637deff5938c7e660f0fab034c4aaef7a5368
SSDEEP

3072:T4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:siI/PlY37ZLF4Ca6WABqBOvs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b4e93a84065f80b095edd67f9f79c6bf_JaffaCakes118
- Size
  
  165KB
- MD5
  
  b4e93a84065f80b095edd67f9f79c6bf
- SHA1
  
  031836ec4f6b7aa3f40f15cae7075c7d8038de37
- SHA256
  
  936e9081f817f806f3bb2206a24c098308b6557f08b2b57ee13291d05c65ce6a
- SHA512
  
  8e1c95ee9cb6cd347785cbf8c1833607a06ee923fbb039d45be2f92d8906f241c383b9ee67b02833b616f184756637deff5938c7e660f0fab034c4aaef7a5368
- SSDEEP
  
  3072:T4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:siI/PlY37ZLF4Ca6WABqBOvs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2