a63b2a30267f9f805e0f2bc8a4e0d678255f954feac6abd1d20b4cf6b66eb129 | Triage

Sharing

General

Target

b51bbbf66d072c5e5f1a317470d22047_JaffaCakes118
Size

1.6MB
Sample

240616-zhacpa1clp
MD5

b51bbbf66d072c5e5f1a317470d22047
SHA1

678f95e2a0ff266c59a14f17d1598b964be9411e
SHA256

a63b2a30267f9f805e0f2bc8a4e0d678255f954feac6abd1d20b4cf6b66eb129
SHA512

43044574adface453e7280dd18bf2e7e3d3f5a7f675ad0577f9967779b95fe60dafca8b167992481d2c9c3fea148a8f64c96135729c81cbb7940e08bf7b8f629
SSDEEP

49152:OZgu8rAi+3USz3h1/XBkThdTlpSuxQxN9dT4S98e:OGIjR1Oh0TT

Score

5^/10

Malware Config

Targets

- Target
  
  b51bbbf66d072c5e5f1a317470d22047_JaffaCakes118
- Size
  
  1.6MB
- MD5
  
  b51bbbf66d072c5e5f1a317470d22047
- SHA1
  
  678f95e2a0ff266c59a14f17d1598b964be9411e
- SHA256
  
  a63b2a30267f9f805e0f2bc8a4e0d678255f954feac6abd1d20b4cf6b66eb129
- SHA512
  
  43044574adface453e7280dd18bf2e7e3d3f5a7f675ad0577f9967779b95fe60dafca8b167992481d2c9c3fea148a8f64c96135729c81cbb7940e08bf7b8f629
- SSDEEP
  
  49152:OZgu8rAi+3USz3h1/XBkThdTlpSuxQxN9dT4S98e:OGIjR1Oh0TT
Score

5^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2