82540745aac8265ec3a5e38591126f353f3a71b5abd93f00443c18ab300acae8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61acf6d27de5907a56561347e62f3d62_JaffaCakes118
Size

95KB
Sample

240721-2gam6szhnk
MD5

61acf6d27de5907a56561347e62f3d62
SHA1

232204f66657c2f47bc5b653778245de752750be
SHA256

82540745aac8265ec3a5e38591126f353f3a71b5abd93f00443c18ab300acae8
SHA512

91704158c77948a99ffbc8e298841a52d30d904891453746424647831e98b4e5ce7fcd4652a4d09bc088eacde141e17d94f1118c7287c21b914f759a92961ffc
SSDEEP

1536:BZRoKtxQlFTtQbYDGinISetaFzyAchGu+0fAj9kDqg2+9irHYfLj+QdYxC3LAJJE:iKtxQlFTtW1aRNbulfUkDqEOHYjj+QYO

Score

7^/10

Malware Config

Targets

- Target
  
  61acf6d27de5907a56561347e62f3d62_JaffaCakes118
- Size
  
  95KB
- MD5
  
  61acf6d27de5907a56561347e62f3d62
- SHA1
  
  232204f66657c2f47bc5b653778245de752750be
- SHA256
  
  82540745aac8265ec3a5e38591126f353f3a71b5abd93f00443c18ab300acae8
- SHA512
  
  91704158c77948a99ffbc8e298841a52d30d904891453746424647831e98b4e5ce7fcd4652a4d09bc088eacde141e17d94f1118c7287c21b914f759a92961ffc
- SSDEEP
  
  1536:BZRoKtxQlFTtQbYDGinISetaFzyAchGu+0fAj9kDqg2+9irHYfLj+QdYxC3LAJJE:iKtxQlFTtW1aRNbulfUkDqEOHYjj+QYO
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2