bd8479ab8e2f28efbd40d182c02ae80b992a58c563edd9ddc73a04dfcbab862b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

261685f2b897bd6b7e3a4d74ee6d6df9_JaffaCakes118
Size

784KB
Sample

240329-ta18jscd88
MD5

261685f2b897bd6b7e3a4d74ee6d6df9
SHA1

14f94131730c81f60eeb285481835b271771d40a
SHA256

bd8479ab8e2f28efbd40d182c02ae80b992a58c563edd9ddc73a04dfcbab862b
SHA512

ee867e3bca537b2280aabd6eadf19db0b3c7a9aa70d1204aa484250ded602f13f7e9c49b0eb001a18b2ee86d0890a6bd6ddde191cc0f15f989211a3c70613b4d
SSDEEP

12288:AjDn9mGk0G9YdgEOF8AksBvhkqPUPp0wC9v5BfpisssYDqQCJCy4LwDtMb:AjDn9mGvgmSBvxPUPp0wIx9piFqQR/

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  261685f2b897bd6b7e3a4d74ee6d6df9_JaffaCakes118
- Size
  
  784KB
- MD5
  
  261685f2b897bd6b7e3a4d74ee6d6df9
- SHA1
  
  14f94131730c81f60eeb285481835b271771d40a
- SHA256
  
  bd8479ab8e2f28efbd40d182c02ae80b992a58c563edd9ddc73a04dfcbab862b
- SHA512
  
  ee867e3bca537b2280aabd6eadf19db0b3c7a9aa70d1204aa484250ded602f13f7e9c49b0eb001a18b2ee86d0890a6bd6ddde191cc0f15f989211a3c70613b4d
- SSDEEP
  
  12288:AjDn9mGk0G9YdgEOF8AksBvhkqPUPp0wC9v5BfpisssYDqQCJCy4LwDtMb:AjDn9mGvgmSBvxPUPp0wIx9piFqQR/
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2