a9f13a7b1ed7d3dd54713244e364542967c762d7c26253997c1ba23490e10c9a | Triage

Sharing

General

Target

e87d6952be91f7c8b7bd0e0a346edef8_JaffaCakes118
Size

57KB
Sample

240408-1mkvnaga8s
MD5

e87d6952be91f7c8b7bd0e0a346edef8
SHA1

db34b23ff447240f15f0d91ab039d1bd83e7f85f
SHA256

a9f13a7b1ed7d3dd54713244e364542967c762d7c26253997c1ba23490e10c9a
SHA512

873a648e9afb28ac77d051e785bba0d3cd17cb6c40c889148b93ce2beb874a147387cf6b3cfcfafba6ffde8820030f4424472d2e65f0a0b2b367ceca01f920da
SSDEEP

768:x4ktlIF3BF3INUF3G6noj3r/eK4YtQhbgp5231mmZ3AtWCGN9KbhUyD6m0OQW:f4RBRI+RG6or/eKEhbx8mZ3AYQKyD6

Score

7^/10

Malware Config

Targets

- Target
  
  e87d6952be91f7c8b7bd0e0a346edef8_JaffaCakes118
- Size
  
  57KB
- MD5
  
  e87d6952be91f7c8b7bd0e0a346edef8
- SHA1
  
  db34b23ff447240f15f0d91ab039d1bd83e7f85f
- SHA256
  
  a9f13a7b1ed7d3dd54713244e364542967c762d7c26253997c1ba23490e10c9a
- SHA512
  
  873a648e9afb28ac77d051e785bba0d3cd17cb6c40c889148b93ce2beb874a147387cf6b3cfcfafba6ffde8820030f4424472d2e65f0a0b2b367ceca01f920da
- SSDEEP
  
  768:x4ktlIF3BF3INUF3G6noj3r/eK4YtQhbgp5231mmZ3AtWCGN9KbhUyD6m0OQW:f4RBRI+RG6or/eKEhbx8mZ3AYQKyD6
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2