5d6f9b8f21d9b84d220c3f80a5e54c41d266ee521651f5b82f70a50477ab9ebf | Triage

Sharing

General

Target

47456024bfc68a1994780a999449543c_JaffaCakes118
Size

137KB
Sample

240714-3l6rvaxfkn
MD5

47456024bfc68a1994780a999449543c
SHA1

17f8ae9052e2b7386d9cd3f10054550eee3e7164
SHA256

5d6f9b8f21d9b84d220c3f80a5e54c41d266ee521651f5b82f70a50477ab9ebf
SHA512

6e05437832b30dcfce93f65665a6fe6a12965c7a729886d22ca559a73fc2fce92156c6b1c813a782a7ab93a553b8c90b6c5d14b5f19036d8b7d60f0fa6555eca
SSDEEP

3072:hZOFOkwVKjC44En9FIUo+ouALmpa8Xgbw4Ib/BtyBLdhhf2zYbhwg7ou7:hZWOHVyCa9FIU9oZG4wDr4YU2EoE

Score

7^/10

Malware Config

Targets

- Target
  
  47456024bfc68a1994780a999449543c_JaffaCakes118
- Size
  
  137KB
- MD5
  
  47456024bfc68a1994780a999449543c
- SHA1
  
  17f8ae9052e2b7386d9cd3f10054550eee3e7164
- SHA256
  
  5d6f9b8f21d9b84d220c3f80a5e54c41d266ee521651f5b82f70a50477ab9ebf
- SHA512
  
  6e05437832b30dcfce93f65665a6fe6a12965c7a729886d22ca559a73fc2fce92156c6b1c813a782a7ab93a553b8c90b6c5d14b5f19036d8b7d60f0fa6555eca
- SSDEEP
  
  3072:hZOFOkwVKjC44En9FIUo+ouALmpa8Xgbw4Ib/BtyBLdhhf2zYbhwg7ou7:hZWOHVyCa9FIU9oZG4wDr4YU2EoE
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2