f5f09b0d6c408295e202017eef87aa27b86dfc3c2edf5debc41f873ff0150c4a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bcf29876b111924c7400fe94002b455_JaffaCakes118
Size

88KB
Sample

240701-vm7frstbrp
MD5

1bcf29876b111924c7400fe94002b455
SHA1

b59d955b1c4adeec25d003f703e3d9eba4164be7
SHA256

f5f09b0d6c408295e202017eef87aa27b86dfc3c2edf5debc41f873ff0150c4a
SHA512

47bfd78061be66666c05c2fa343f7f7667658d82b90372d0a5dce7676f45283b86d7e88cf9a603ea7bcf37703c6dbb0e19681607d2dd7bb8e56468c2c5da062c
SSDEEP

768:gNFqI1FNLSZmWC4M0AhH92f8EgCIRsfIU7yOhrwOrj0h8HPEIIpPMO/kXAarSUkd:Igrbk9CgBsQQenNpF8XLrhiDP1

Score

7^/10

Malware Config

Targets

- Target
  
  1bcf29876b111924c7400fe94002b455_JaffaCakes118
- Size
  
  88KB
- MD5
  
  1bcf29876b111924c7400fe94002b455
- SHA1
  
  b59d955b1c4adeec25d003f703e3d9eba4164be7
- SHA256
  
  f5f09b0d6c408295e202017eef87aa27b86dfc3c2edf5debc41f873ff0150c4a
- SHA512
  
  47bfd78061be66666c05c2fa343f7f7667658d82b90372d0a5dce7676f45283b86d7e88cf9a603ea7bcf37703c6dbb0e19681607d2dd7bb8e56468c2c5da062c
- SSDEEP
  
  768:gNFqI1FNLSZmWC4M0AhH92f8EgCIRsfIU7yOhrwOrj0h8HPEIIpPMO/kXAarSUkd:Igrbk9CgBsQQenNpF8XLrhiDP1
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2