f9bfb7faa0c539b263fc320e0d51bc71cea6de5f404dcb26e61fc78c628a0f8b | Triage

Sharing

General

Target

ebb57fd69aa1c9a0a3fbcc891d448712_JaffaCakes118
Size

225B
Sample

240410-wz279aah7x
MD5

ebb57fd69aa1c9a0a3fbcc891d448712
SHA1

57a9d6818b92776ade431f0fbb5b49d310136d00
SHA256

f9bfb7faa0c539b263fc320e0d51bc71cea6de5f404dcb26e61fc78c628a0f8b
SHA512

ba77dcf0ca1c78e6a0a1783ac93b2ff540eee124b0a6b6de4044721594de0574e90f8b77fcc0b6b0eeafef8fcba6aa056b77ea9c46750d66898490162dddb577

Score

7^/10

Malware Config

Targets

- Target
  
  ebb57fd69aa1c9a0a3fbcc891d448712_JaffaCakes118
- Size
  
  225B
- MD5
  
  ebb57fd69aa1c9a0a3fbcc891d448712
- SHA1
  
  57a9d6818b92776ade431f0fbb5b49d310136d00
- SHA256
  
  f9bfb7faa0c539b263fc320e0d51bc71cea6de5f404dcb26e61fc78c628a0f8b
- SHA512
  
  ba77dcf0ca1c78e6a0a1783ac93b2ff540eee124b0a6b6de4044721594de0574e90f8b77fcc0b6b0eeafef8fcba6aa056b77ea9c46750d66898490162dddb577
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2