ffcbeaf0663ff40335a47d89d6c8403ef9222d6d329af7246e90d318bfcfa632 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18c497f99a4188d63a19475e34c40b5b_JaffaCakes118
Size

72KB
Sample

240628-e2ca6stemr
MD5

18c497f99a4188d63a19475e34c40b5b
SHA1

4f277d861b30da24548771b55da6d5beb3c450fa
SHA256

ffcbeaf0663ff40335a47d89d6c8403ef9222d6d329af7246e90d318bfcfa632
SHA512

9cbde0214c73911c0d0ddf9ea82fb5b341e8358c9701eabd30727155eac4e57c64c1c6b281772bf10198b1dd5c6cd78a989ee61026fdfe2dc4afd752139c58dc
SSDEEP

1536:GxYH6A5zgA46YWGMmsGo7eRRneVttMx6Kx5sqm:THxzYWGMttVtox5C

Score

7^/10

Malware Config

Targets

- Target
  
  18c497f99a4188d63a19475e34c40b5b_JaffaCakes118
- Size
  
  72KB
- MD5
  
  18c497f99a4188d63a19475e34c40b5b
- SHA1
  
  4f277d861b30da24548771b55da6d5beb3c450fa
- SHA256
  
  ffcbeaf0663ff40335a47d89d6c8403ef9222d6d329af7246e90d318bfcfa632
- SHA512
  
  9cbde0214c73911c0d0ddf9ea82fb5b341e8358c9701eabd30727155eac4e57c64c1c6b281772bf10198b1dd5c6cd78a989ee61026fdfe2dc4afd752139c58dc
- SSDEEP
  
  1536:GxYH6A5zgA46YWGMmsGo7eRRneVttMx6Kx5sqm:THxzYWGMttVtox5C
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2