ad09cad94d3f34e6babb5eb746be8fa357358692f5e617bacc6238d6923d7af5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d39fec35a5f452c0db148cbd14b4714_JaffaCakes118
Size

138KB
Sample

240712-nstcrssajq
MD5

3d39fec35a5f452c0db148cbd14b4714
SHA1

0ec583ec149f2e3c63817d0bf7427517ced39cd4
SHA256

ad09cad94d3f34e6babb5eb746be8fa357358692f5e617bacc6238d6923d7af5
SHA512

e5d173fcb203ca11a9e801385e675408ed70b01aa6c62b3ef3b317fbb3e0fca87fcb71ed6aeee53a9c920bfd16246817f696d96451dac26a1be5dcf22dfede6a
SSDEEP

3072:pNbFdNhJ3m/n9XBa5pLi9uB36JIOxhIYcD82E+sgRaNqGF/dVyAbu:JhM9RiLiK3nsha4TgRUqcVySu

Score

7^/10

Malware Config

Targets

- Target
  
  3d39fec35a5f452c0db148cbd14b4714_JaffaCakes118
- Size
  
  138KB
- MD5
  
  3d39fec35a5f452c0db148cbd14b4714
- SHA1
  
  0ec583ec149f2e3c63817d0bf7427517ced39cd4
- SHA256
  
  ad09cad94d3f34e6babb5eb746be8fa357358692f5e617bacc6238d6923d7af5
- SHA512
  
  e5d173fcb203ca11a9e801385e675408ed70b01aa6c62b3ef3b317fbb3e0fca87fcb71ed6aeee53a9c920bfd16246817f696d96451dac26a1be5dcf22dfede6a
- SSDEEP
  
  3072:pNbFdNhJ3m/n9XBa5pLi9uB36JIOxhIYcD82E+sgRaNqGF/dVyAbu:JhM9RiLiK3nsha4TgRUqcVySu
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2