d455720fdfa589c441cdd1d59a55f1fce2eb4296ad88bc4f863de4cd692d0fa4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0412ba09d34084fb2172dc27b8e17bab_JaffaCakes118
Size

121KB
Sample

240620-jerjsswela
MD5

0412ba09d34084fb2172dc27b8e17bab
SHA1

d11fdeaa328dff6b2a2dcfc9c6beb96262796b7a
SHA256

d455720fdfa589c441cdd1d59a55f1fce2eb4296ad88bc4f863de4cd692d0fa4
SHA512

8589339b68e8d2f6a2033d4bffebfdd07d264ec4a0e2d35222a6889f44a10d6fc37e56e917509d3ee9cbbf87fac85c251b401ba7b9393889cdaeb4edc2cd0e58
SSDEEP

1536:jNxxmEDtqrQ8NSP5re9zSCREd+blIUuKSbT10Zu3hpqlHc:RxQEDtqrQ5re9BS+blIpNtix

Score

7^/10

Malware Config

Targets

- Target
  
  0412ba09d34084fb2172dc27b8e17bab_JaffaCakes118
- Size
  
  121KB
- MD5
  
  0412ba09d34084fb2172dc27b8e17bab
- SHA1
  
  d11fdeaa328dff6b2a2dcfc9c6beb96262796b7a
- SHA256
  
  d455720fdfa589c441cdd1d59a55f1fce2eb4296ad88bc4f863de4cd692d0fa4
- SHA512
  
  8589339b68e8d2f6a2033d4bffebfdd07d264ec4a0e2d35222a6889f44a10d6fc37e56e917509d3ee9cbbf87fac85c251b401ba7b9393889cdaeb4edc2cd0e58
- SSDEEP
  
  1536:jNxxmEDtqrQ8NSP5re9zSCREd+blIUuKSbT10Zu3hpqlHc:RxQEDtqrQ5re9BS+blIpNtix
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2