a05f65cf1219d8b6b854f2017b35228244a3d575b3fc9642216af2a44361e051 | Triage

Sharing

General

Target

5ac5e6f0f9a7b51cb79160673df1dd43_JaffaCakes118
Size

519KB
Sample

240719-gzyshawemj
MD5

5ac5e6f0f9a7b51cb79160673df1dd43
SHA1

dd3cdf0dbf19ef5e4595d48aa24f5d864cfeffb0
SHA256

a05f65cf1219d8b6b854f2017b35228244a3d575b3fc9642216af2a44361e051
SHA512

c1579badc55ef9a4d2c2c6bd7ce42fa17f9682c439a5071f1a100e51469d8417c6a81d2357a0d6fbf26e13cd8edc6e3016aee2be905a8aafa907395c2f559336
SSDEEP

3072:+rhZompu0lw5/tooJ7GeEA5POwAddddvmlJjtASY/kMgsC1YayYJlXjfjZqMNjsB:+Fwww5/jO2hFASYM9sCjyiZv9Cavo

Score

7^/10

Malware Config

Targets

- Target
  
  5ac5e6f0f9a7b51cb79160673df1dd43_JaffaCakes118
- Size
  
  519KB
- MD5
  
  5ac5e6f0f9a7b51cb79160673df1dd43
- SHA1
  
  dd3cdf0dbf19ef5e4595d48aa24f5d864cfeffb0
- SHA256
  
  a05f65cf1219d8b6b854f2017b35228244a3d575b3fc9642216af2a44361e051
- SHA512
  
  c1579badc55ef9a4d2c2c6bd7ce42fa17f9682c439a5071f1a100e51469d8417c6a81d2357a0d6fbf26e13cd8edc6e3016aee2be905a8aafa907395c2f559336
- SSDEEP
  
  3072:+rhZompu0lw5/tooJ7GeEA5POwAddddvmlJjtASY/kMgsC1YayYJlXjfjZqMNjsB:+Fwww5/jO2hFASYM9sCjyiZv9Cavo
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2