Extracted

• • Target

    2be90a288ffb81a54be3a7b95bc8f0da_JaffaCakes118

  • Size

    14KB

  • MD5

    2be90a288ffb81a54be3a7b95bc8f0da

  • SHA1

    4c36ee9a5912f0c71791c9fe57a369468b5c519a

  • SHA256

    91a153e006a2d90ec6646cd3175dd09739694551faed0ac7d68df4236135d704

  • SHA512

    1892871f82784ca1e6cec060eb497d88be3b7a7d8a576abe179d4308bcb1de11635f23bd161f900bf0830703000d628584b6984eb87cb381e25af63269d86433

  • SSDEEP

    384:IqAufvrm62zuq/8GOmfqLEvpT/Fnlj5brJOFSfu:Iqfrm62SqZOm+k5bffu

  Score

  10^/10

  • Blocklisted process makes network request

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Legitimate hosting services abused for malware hosting/C2

  behavioral1behavioral2