e121c82a65b7b46747eedb162d47cbea2d76e3a7c8f053b48ad31b7219b93d9e | Triage

Sharing

General

Target

5dbe4a9fb1b8d12b1a120b093a7ac435_JaffaCakes118
Size

1KB
Sample

240520-hq37ashc3w
MD5

5dbe4a9fb1b8d12b1a120b093a7ac435
SHA1

cb48c426c25ebddbeb40013645829f96cf88a93c
SHA256

e121c82a65b7b46747eedb162d47cbea2d76e3a7c8f053b48ad31b7219b93d9e
SHA512

2db09a91c2ecd2c03baafbbc983f1279478a6d6ba6745b47221263e1438858241e68995bc871aaec91ef464da6b8e1f5231c368813482bd4b7d9fbbf27f736da

Score

7^/10

execution

Malware Config

Targets

- Target
  
  5dbe4a9fb1b8d12b1a120b093a7ac435_JaffaCakes118
- Size
  
  1KB
- MD5
  
  5dbe4a9fb1b8d12b1a120b093a7ac435
- SHA1
  
  cb48c426c25ebddbeb40013645829f96cf88a93c
- SHA256
  
  e121c82a65b7b46747eedb162d47cbea2d76e3a7c8f053b48ad31b7219b93d9e
- SHA512
  
  2db09a91c2ecd2c03baafbbc983f1279478a6d6ba6745b47221263e1438858241e68995bc871aaec91ef464da6b8e1f5231c368813482bd4b7d9fbbf27f736da
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2