e8464fe7b0803d041f98457eb69a1c7c118e6f736c144f28c679ef58034a980e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f11dfbb4cf9a1ecbd057db18949fe3ae_JaffaCakes118
Size

100KB
Sample

240415-p973xsfa37
MD5

f11dfbb4cf9a1ecbd057db18949fe3ae
SHA1

18d1940c29dcf6f92c0de2327bd57b5a07fc48cf
SHA256

e8464fe7b0803d041f98457eb69a1c7c118e6f736c144f28c679ef58034a980e
SHA512

efded56656baefcb4309f4f74d65fb546b32a4e0bbcd7c07de1472e79f4ce7541c2552f01d4d3f12dbb59a7908baac7410915a1c3c3b3ee67ff230e1bca7b0e4
SSDEEP

1536:SzxcMPyYfQxJVgux399nGBKMDwgWsrsm94x1Vg98uPGUt8bfgwlSU6bCz2gCzuYU:SryAQxEux8tDisuyRPGUt8E4+ktY

Score

7^/10

Malware Config

Targets

- Target
  
  f11dfbb4cf9a1ecbd057db18949fe3ae_JaffaCakes118
- Size
  
  100KB
- MD5
  
  f11dfbb4cf9a1ecbd057db18949fe3ae
- SHA1
  
  18d1940c29dcf6f92c0de2327bd57b5a07fc48cf
- SHA256
  
  e8464fe7b0803d041f98457eb69a1c7c118e6f736c144f28c679ef58034a980e
- SHA512
  
  efded56656baefcb4309f4f74d65fb546b32a4e0bbcd7c07de1472e79f4ce7541c2552f01d4d3f12dbb59a7908baac7410915a1c3c3b3ee67ff230e1bca7b0e4
- SSDEEP
  
  1536:SzxcMPyYfQxJVgux399nGBKMDwgWsrsm94x1Vg98uPGUt8bfgwlSU6bCz2gCzuYU:SryAQxEux8tDisuyRPGUt8E4+ktY
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2