393087be80532be08372e4ac5226124f3f8066f4a6f4f9f627e2f3c50b3edaf6 | Triage

Sharing

General

Target

b4f152039363ed276a883ed9e4ded050_JaffaCakes118
Size

165KB
Sample

241130-fx1cwatrbs
MD5

b4f152039363ed276a883ed9e4ded050
SHA1

63188affc65b442516d386639ac9f51ccac45f30
SHA256

393087be80532be08372e4ac5226124f3f8066f4a6f4f9f627e2f3c50b3edaf6
SHA512

7cdba86d5b7c65cf51076ddda7c7e5fc04250126c415859c9e94984b99b92596d8f9faff1d7d932d2a4b1d9c0945912f84160de1d24b1f860c680d9ee037b199
SSDEEP

3072:14HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:GiI/PlY37ZLF4Ca6WABqBOvs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b4f152039363ed276a883ed9e4ded050_JaffaCakes118
- Size
  
  165KB
- MD5
  
  b4f152039363ed276a883ed9e4ded050
- SHA1
  
  63188affc65b442516d386639ac9f51ccac45f30
- SHA256
  
  393087be80532be08372e4ac5226124f3f8066f4a6f4f9f627e2f3c50b3edaf6
- SHA512
  
  7cdba86d5b7c65cf51076ddda7c7e5fc04250126c415859c9e94984b99b92596d8f9faff1d7d932d2a4b1d9c0945912f84160de1d24b1f860c680d9ee037b199
- SSDEEP
  
  3072:14HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:GiI/PlY37ZLF4Ca6WABqBOvs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2