9229c99cdb8e77467a22c8ebfdd03c1eebbcc81bc10c6dd42d18f2d2b0ffdc2e | Triage

Sharing

General

Target

72a6c48a4c8a673a61c304cc8d26a471_JaffaCakes118
Size

167KB
Sample

240525-vlm1qsbg66
MD5

72a6c48a4c8a673a61c304cc8d26a471
SHA1

929b14d0fb397df14f6abfbe7196c41d9688ae57
SHA256

9229c99cdb8e77467a22c8ebfdd03c1eebbcc81bc10c6dd42d18f2d2b0ffdc2e
SHA512

d7e2572bd80f019eebb544f21d5af4e1ef8cbaef0efef73309193a3d58eb8f4bd085b7909597972378f20a4113d471aecc17ea31a0e04969200765b5f6fc63e0
SSDEEP

3072:UeXYyLtUl2IVyGwpGQQR2VBC67aT6dsHeyXi:UeXhL+UJJ37a6dsHe8i

Score

7^/10

Malware Config

Targets

- Target
  
  72a6c48a4c8a673a61c304cc8d26a471_JaffaCakes118
- Size
  
  167KB
- MD5
  
  72a6c48a4c8a673a61c304cc8d26a471
- SHA1
  
  929b14d0fb397df14f6abfbe7196c41d9688ae57
- SHA256
  
  9229c99cdb8e77467a22c8ebfdd03c1eebbcc81bc10c6dd42d18f2d2b0ffdc2e
- SHA512
  
  d7e2572bd80f019eebb544f21d5af4e1ef8cbaef0efef73309193a3d58eb8f4bd085b7909597972378f20a4113d471aecc17ea31a0e04969200765b5f6fc63e0
- SSDEEP
  
  3072:UeXYyLtUl2IVyGwpGQQR2VBC67aT6dsHeyXi:UeXhL+UJJ37a6dsHe8i
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2