d6c13ae93fdcb79687f764b7e9c70aa11516dcefa9b883294a3577d702405baf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4fb9243d698f5e23179ce5a169a581e8_JaffaCakes118
Size

191KB
Sample

240517-nwjmqsgb52
MD5

4fb9243d698f5e23179ce5a169a581e8
SHA1

d4123a9d4213e54b9c3a3b2bc8b7ebba839d8b38
SHA256

d6c13ae93fdcb79687f764b7e9c70aa11516dcefa9b883294a3577d702405baf
SHA512

9c8cd5d1c1170f6c08f95566e701474b56f087b8df7246b8675f16a62de054c295ce71848ee8730789f67da7fecb3835f29a7342c4cf48b1c536fa161566bda6
SSDEEP

3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0dh:HAVySV1eY4k437d+4wkTHdS2J

Score

7^/10

Malware Config

Targets

- Target
  
  4fb9243d698f5e23179ce5a169a581e8_JaffaCakes118
- Size
  
  191KB
- MD5
  
  4fb9243d698f5e23179ce5a169a581e8
- SHA1
  
  d4123a9d4213e54b9c3a3b2bc8b7ebba839d8b38
- SHA256
  
  d6c13ae93fdcb79687f764b7e9c70aa11516dcefa9b883294a3577d702405baf
- SHA512
  
  9c8cd5d1c1170f6c08f95566e701474b56f087b8df7246b8675f16a62de054c295ce71848ee8730789f67da7fecb3835f29a7342c4cf48b1c536fa161566bda6
- SSDEEP
  
  3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0dh:HAVySV1eY4k437d+4wkTHdS2J
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2