df660167f38eb00e453fba02e0b35fe1787ac0cc1f3d7df5e2aec70dd5144bd8 | Triage

Sharing

General

Target

68ae74441d1f9c6662b44c60b9f26165_JaffaCakes118
Size

191KB
Sample

240522-z8bcnshb9z
MD5

68ae74441d1f9c6662b44c60b9f26165
SHA1

e6d712d3a09451bc051cb12b0a12ae7d070048f2
SHA256

df660167f38eb00e453fba02e0b35fe1787ac0cc1f3d7df5e2aec70dd5144bd8
SHA512

9029229d6d22f448e2151a05e89b37eb60b10604d5118713103411538faa10805a58fac909dea230f4bc85b3561e14721f00e2e2c623e6611dfaf2acccf67a1b
SSDEEP

3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0dT:HAVySV1eY4k437d+4wkTHdS2r

Score

7^/10

Malware Config

Targets

- Target
  
  68ae74441d1f9c6662b44c60b9f26165_JaffaCakes118
- Size
  
  191KB
- MD5
  
  68ae74441d1f9c6662b44c60b9f26165
- SHA1
  
  e6d712d3a09451bc051cb12b0a12ae7d070048f2
- SHA256
  
  df660167f38eb00e453fba02e0b35fe1787ac0cc1f3d7df5e2aec70dd5144bd8
- SHA512
  
  9029229d6d22f448e2151a05e89b37eb60b10604d5118713103411538faa10805a58fac909dea230f4bc85b3561e14721f00e2e2c623e6611dfaf2acccf67a1b
- SSDEEP
  
  3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0dT:HAVySV1eY4k437d+4wkTHdS2r
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2