b4701525d7883057e4869ecb3b1039adc7dd851b775fa6889481f86d220ba67c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b380afdde0ae92ac5ff6eff4b91fde78_JaffaCakes118
Size

191KB
Sample

240616-pmrgnataqf
MD5

b380afdde0ae92ac5ff6eff4b91fde78
SHA1

3d5bf5a22a3e8a58d8299eaea3b49ed3f434cc55
SHA256

b4701525d7883057e4869ecb3b1039adc7dd851b775fa6889481f86d220ba67c
SHA512

26bfb72e9d69010e3fe97f7daba7a7cc1a0b19175e96ca10e5727431920757cf89777042c3ee8877aaa304ded4aa37c5b74725956a3b38ed1c48a7c68a43a434
SSDEEP

3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0do:HAVySV1eY4k437d+4wkTHdS2g

Score

7^/10

Malware Config

Targets

- Target
  
  b380afdde0ae92ac5ff6eff4b91fde78_JaffaCakes118
- Size
  
  191KB
- MD5
  
  b380afdde0ae92ac5ff6eff4b91fde78
- SHA1
  
  3d5bf5a22a3e8a58d8299eaea3b49ed3f434cc55
- SHA256
  
  b4701525d7883057e4869ecb3b1039adc7dd851b775fa6889481f86d220ba67c
- SHA512
  
  26bfb72e9d69010e3fe97f7daba7a7cc1a0b19175e96ca10e5727431920757cf89777042c3ee8877aaa304ded4aa37c5b74725956a3b38ed1c48a7c68a43a434
- SSDEEP
  
  3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0do:HAVySV1eY4k437d+4wkTHdS2g
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2