8173577d9d5435172b823238eb6994e6e96b57f0b8403126195d89f873db8aa1 | Triage

Sharing

General

Target

31302936995b78f1bc5167aa1ce51f53_JaffaCakes118
Size

798KB
Sample

240709-va698svhkf
MD5

31302936995b78f1bc5167aa1ce51f53
SHA1

6c7d2db2fe156201c046c934a4d482518a66b5a9
SHA256

8173577d9d5435172b823238eb6994e6e96b57f0b8403126195d89f873db8aa1
SHA512

21fefdf9993cabc940c1dccda3dd9e0a8c8bc75d5380ca31e9cde81b17f204c34f8e6ae5eda7bec00f7080f80c4e59f7798c9270f6bd22939237a82061fb44c7
SSDEEP

12288:pQLXLPUEOGM9XDP35ghOsVeV4EpbBqSPS5rkNgqG0HgbXozjO888888888888W8/:Grl7M9XDP3ussq4EpbBqSPSa3a

Score

7^/10

Malware Config

Targets

- Target
  
  31302936995b78f1bc5167aa1ce51f53_JaffaCakes118
- Size
  
  798KB
- MD5
  
  31302936995b78f1bc5167aa1ce51f53
- SHA1
  
  6c7d2db2fe156201c046c934a4d482518a66b5a9
- SHA256
  
  8173577d9d5435172b823238eb6994e6e96b57f0b8403126195d89f873db8aa1
- SHA512
  
  21fefdf9993cabc940c1dccda3dd9e0a8c8bc75d5380ca31e9cde81b17f204c34f8e6ae5eda7bec00f7080f80c4e59f7798c9270f6bd22939237a82061fb44c7
- SSDEEP
  
  12288:pQLXLPUEOGM9XDP35ghOsVeV4EpbBqSPS5rkNgqG0HgbXozjO888888888888W8/:Grl7M9XDP3ussq4EpbBqSPSa3a
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2