cfcc10ca56c34c60869898fc8b4bbc204eead0b32836333a4e860720cbd5b62d | Triage

Sharing

General

Target

2e8c01b600871b96dc93153c151535aa_JaffaCakes118
Size

32KB
Sample

240709-bzgakasbje
MD5

2e8c01b600871b96dc93153c151535aa
SHA1

1fda4fc1f7d3ba727b9aec648a793b0784fa373e
SHA256

cfcc10ca56c34c60869898fc8b4bbc204eead0b32836333a4e860720cbd5b62d
SHA512

ac1ac063bbc39a26b361b19a202973df4c66ad39d26d855ab8bc21a8e0e6403f8c3625ad538a88b3d1a95f4b79386a332bffebaaeef19c045c3ecf8adad4bf58
SSDEEP

384:UfnOG4WkYbPyrwMX8YhP6UYDTfjlZpuYra6/5:4OjlwMX8YhiUw/L955

Score

7^/10

Malware Config

Targets

- Target
  
  2e8c01b600871b96dc93153c151535aa_JaffaCakes118
- Size
  
  32KB
- MD5
  
  2e8c01b600871b96dc93153c151535aa
- SHA1
  
  1fda4fc1f7d3ba727b9aec648a793b0784fa373e
- SHA256
  
  cfcc10ca56c34c60869898fc8b4bbc204eead0b32836333a4e860720cbd5b62d
- SHA512
  
  ac1ac063bbc39a26b361b19a202973df4c66ad39d26d855ab8bc21a8e0e6403f8c3625ad538a88b3d1a95f4b79386a332bffebaaeef19c045c3ecf8adad4bf58
- SSDEEP
  
  384:UfnOG4WkYbPyrwMX8YhP6UYDTfjlZpuYra6/5:4OjlwMX8YhiUw/L955
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2