13b6f0e2ec7c0e2b33c2f8392ec326c2009d1fbbccf3c4e07dc598092024e7b5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa37c092379b143321d4cccd60dff897_JaffaCakes118
Size

32KB
Sample

240419-nsyx9aaf44
MD5

fa37c092379b143321d4cccd60dff897
SHA1

e4e055346ac72e5f937fb8a73248636a4f6f859d
SHA256

13b6f0e2ec7c0e2b33c2f8392ec326c2009d1fbbccf3c4e07dc598092024e7b5
SHA512

41f3c1281924f1bdfcc23d3870fe8431a08dffdcaf555d2b08c42a7df413c2088f26710f93a380929d1cef21406ea424bc1037e167800bea70a216b847f0f852
SSDEEP

384:zwLLDtK1SWPU3ftBSwI3HwdfNfnCcAVndVnyuHeTqJZlJP+/+H1WEPP:8rtK1FPU31wwI3wdxCccdVyeZZlgWHj3

Score

7^/10

Malware Config

Targets

- Target
  
  fa37c092379b143321d4cccd60dff897_JaffaCakes118
- Size
  
  32KB
- MD5
  
  fa37c092379b143321d4cccd60dff897
- SHA1
  
  e4e055346ac72e5f937fb8a73248636a4f6f859d
- SHA256
  
  13b6f0e2ec7c0e2b33c2f8392ec326c2009d1fbbccf3c4e07dc598092024e7b5
- SHA512
  
  41f3c1281924f1bdfcc23d3870fe8431a08dffdcaf555d2b08c42a7df413c2088f26710f93a380929d1cef21406ea424bc1037e167800bea70a216b847f0f852
- SSDEEP
  
  384:zwLLDtK1SWPU3ftBSwI3HwdfNfnCcAVndVnyuHeTqJZlJP+/+H1WEPP:8rtK1FPU31wwI3wdxCccdVyeZZlgWHj3
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2