1b53ed47880c03e828a0d034592e88d15d91cd0f936eb2b90fa3c1aedbbde553 | Triage

Sharing

General

Target

JaffaCakes118_e29e1c7b1613325b4e163d69577337d2
Size

63KB
Sample

250120-k55psaslck
MD5

e29e1c7b1613325b4e163d69577337d2
SHA1

0d0b88bc001556139c6e5cabef2f6745cf054acc
SHA256

1b53ed47880c03e828a0d034592e88d15d91cd0f936eb2b90fa3c1aedbbde553
SHA512

67874172f13b83eb77bcf61cf1a8ab624187535421a9d642d3eb026f112338a1a4590d7ae3ae1f3d23b95c0444503185f25d57b0825968b352154d712610e45c
SSDEEP

1536:V3cpyORJLuB4P4AJJv4Romu/7B27tpwWbpLCU:V3c1fP4AJJv45s2hhxn

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  JaffaCakes118_e29e1c7b1613325b4e163d69577337d2
- Size
  
  63KB
- MD5
  
  e29e1c7b1613325b4e163d69577337d2
- SHA1
  
  0d0b88bc001556139c6e5cabef2f6745cf054acc
- SHA256
  
  1b53ed47880c03e828a0d034592e88d15d91cd0f936eb2b90fa3c1aedbbde553
- SHA512
  
  67874172f13b83eb77bcf61cf1a8ab624187535421a9d642d3eb026f112338a1a4590d7ae3ae1f3d23b95c0444503185f25d57b0825968b352154d712610e45c
- SSDEEP
  
  1536:V3cpyORJLuB4P4AJJv4Romu/7B27tpwWbpLCU:V3c1fP4AJJv45s2hhxn
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2