518e600c3ebc232b516073e1c95bd70420aacf7a6ef3a88dc056560e1e0dad79 | Triage

Sharing

General

Target

a0885916a9711ec7b39e55a92b5e7121_JaffaCakes118
Size

1.6MB
Sample

240612-nrr4bawhqn
MD5

a0885916a9711ec7b39e55a92b5e7121
SHA1

2f47ee381b0b7fe93b16fe91ec9067721bd72d26
SHA256

518e600c3ebc232b516073e1c95bd70420aacf7a6ef3a88dc056560e1e0dad79
SHA512

2b5747f30f2ed9540e5d1259c182f8f43cdb6d69e286604e040165c838efe2db1f9a6bee06791d10af0f246159262b8c7116e0ab5504d37240ada6c7a9011a8c
SSDEEP

49152:hZgu8rAi+3USz3h1/XBkThdTlpSuxQxN9dT4S9J:hGIjR1Oh0T9

Score

5^/10

Malware Config

Targets

- Target
  
  a0885916a9711ec7b39e55a92b5e7121_JaffaCakes118
- Size
  
  1.6MB
- MD5
  
  a0885916a9711ec7b39e55a92b5e7121
- SHA1
  
  2f47ee381b0b7fe93b16fe91ec9067721bd72d26
- SHA256
  
  518e600c3ebc232b516073e1c95bd70420aacf7a6ef3a88dc056560e1e0dad79
- SHA512
  
  2b5747f30f2ed9540e5d1259c182f8f43cdb6d69e286604e040165c838efe2db1f9a6bee06791d10af0f246159262b8c7116e0ab5504d37240ada6c7a9011a8c
- SSDEEP
  
  49152:hZgu8rAi+3USz3h1/XBkThdTlpSuxQxN9dT4S9J:hGIjR1Oh0T9
Score

5^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2