4ec92a33da8f9318f5bb5520869a4c8592ae1f55e20c820b80647f9fde63f21c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

80fca131f50392819e24a63e95a3bb38_JaffaCakes118
Size

191KB
Sample

240529-rcre1she62
MD5

80fca131f50392819e24a63e95a3bb38
SHA1

0dcc13be031272a20655c0fd2d1169c9835bef8e
SHA256

4ec92a33da8f9318f5bb5520869a4c8592ae1f55e20c820b80647f9fde63f21c
SHA512

b8fb2638503fdb1047fbb398766c72e1929c3d31e24344731a7b3fa6c27961f5741c495a3de0cb6b2db8f0fe328d719e01ccfdb223f49b729347377b5165034c
SSDEEP

3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0dA:HAVySV1eY4k437d+4wkTHdS2I

Score

7^/10

Malware Config

Targets

- Target
  
  80fca131f50392819e24a63e95a3bb38_JaffaCakes118
- Size
  
  191KB
- MD5
  
  80fca131f50392819e24a63e95a3bb38
- SHA1
  
  0dcc13be031272a20655c0fd2d1169c9835bef8e
- SHA256
  
  4ec92a33da8f9318f5bb5520869a4c8592ae1f55e20c820b80647f9fde63f21c
- SHA512
  
  b8fb2638503fdb1047fbb398766c72e1929c3d31e24344731a7b3fa6c27961f5741c495a3de0cb6b2db8f0fe328d719e01ccfdb223f49b729347377b5165034c
- SSDEEP
  
  3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0dA:HAVySV1eY4k437d+4wkTHdS2I
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2