c447709116b071ac219b7f7d1b4c67c9f776b9be1a134bb786b0aa5d9128126a | Triage

Sharing

General

Target

f41cbd79b07c41960ee78e4c108a6017_JaffaCakes118
Size

78KB
Sample

240416-xkmppabd2v
MD5

f41cbd79b07c41960ee78e4c108a6017
SHA1

74f4b8860a6b02ab280a820f630edff6cccf802c
SHA256

c447709116b071ac219b7f7d1b4c67c9f776b9be1a134bb786b0aa5d9128126a
SHA512

6497eea598fb2c34a0affacf15a1b881719afd59ca958d8fdef0c5455e6be035b6b0e74f281838d8a80d4ec296e96ef7220b8f93ad3b77fe9e55efbd497ed51c
SSDEEP

1536:Gem69S/uuKfi0j604vPpCW+UsS8aZzyp0G2Ym/sENNbZmrVv5wxqdeAeDX8yBtJq:B9f4W0GE08y8zAi8yBCvLoFJj9Z1rSB

Score

7^/10

Malware Config

Targets

- Target
  
  f41cbd79b07c41960ee78e4c108a6017_JaffaCakes118
- Size
  
  78KB
- MD5
  
  f41cbd79b07c41960ee78e4c108a6017
- SHA1
  
  74f4b8860a6b02ab280a820f630edff6cccf802c
- SHA256
  
  c447709116b071ac219b7f7d1b4c67c9f776b9be1a134bb786b0aa5d9128126a
- SHA512
  
  6497eea598fb2c34a0affacf15a1b881719afd59ca958d8fdef0c5455e6be035b6b0e74f281838d8a80d4ec296e96ef7220b8f93ad3b77fe9e55efbd497ed51c
- SSDEEP
  
  1536:Gem69S/uuKfi0j604vPpCW+UsS8aZzyp0G2Ym/sENNbZmrVv5wxqdeAeDX8yBtJq:B9f4W0GE08y8zAi8yBCvLoFJj9Z1rSB
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2