39a7e19c96c27536e2d38496635d237a604b5bb36a3a3350f650309a629c1779 | Triage

Sharing

General

Target

03c97fd8353ccd6602678dd53352b900_JaffaCakes118
Size

1.8MB
Sample

240427-2kvgraad9y
MD5

03c97fd8353ccd6602678dd53352b900
SHA1

d50fc62bd46fd76518f2f00d4ada089d0c46d809
SHA256

39a7e19c96c27536e2d38496635d237a604b5bb36a3a3350f650309a629c1779
SHA512

b833e10d76c274b0b82d6d6d512ffd6a083053851b04e1eb6d9a583b4478764c4273349e39632028b339029267999e0aa5cb224900ceec40591956eff05d87e1
SSDEEP

49152:q5+hF0j8F9jWOHVuLS3j3DxYmSAOUrw7pbOo3K3cyYF8g8A:q5aF0OjWOHT3XxsiqtSMp8A

Score

8^/10

Malware Config

Targets

- Target
  
  03c97fd8353ccd6602678dd53352b900_JaffaCakes118
- Size
  
  1.8MB
- MD5
  
  03c97fd8353ccd6602678dd53352b900
- SHA1
  
  d50fc62bd46fd76518f2f00d4ada089d0c46d809
- SHA256
  
  39a7e19c96c27536e2d38496635d237a604b5bb36a3a3350f650309a629c1779
- SHA512
  
  b833e10d76c274b0b82d6d6d512ffd6a083053851b04e1eb6d9a583b4478764c4273349e39632028b339029267999e0aa5cb224900ceec40591956eff05d87e1
- SSDEEP
  
  49152:q5+hF0j8F9jWOHVuLS3j3DxYmSAOUrw7pbOo3K3cyYF8g8A:q5aF0OjWOHT3XxsiqtSMp8A
Score

8^/10
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2