e9e718ce0a17c8d6f8b3acd616a4935192ce8a6edb80ef93f2104bdbdb38bbf5 | Triage

Sharing

General

Target

6924d2b279fa65468b6521d8e410e28f_JaffaCakes118
Size

102KB
Sample

240723-13phsavcmh
MD5

6924d2b279fa65468b6521d8e410e28f
SHA1

aa9736f0aa31c24c939610dee4d441136e475bc1
SHA256

e9e718ce0a17c8d6f8b3acd616a4935192ce8a6edb80ef93f2104bdbdb38bbf5
SHA512

fdf304df55ed6c9104c94ca614d477068413b2a3e1a733eeee0e729f05a11f4f828cee981abf949e3644d60557655ff5dc8024fecfeb6bae17aed1349f41b9f6
SSDEEP

3072:YXbe3OJnOG0TjiKyJBjFDTxcP0nVT65YcNQMr/ZJuXruZ:Yy+EjS9TuP0SNQM7ZSyZ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  6924d2b279fa65468b6521d8e410e28f_JaffaCakes118
- Size
  
  102KB
- MD5
  
  6924d2b279fa65468b6521d8e410e28f
- SHA1
  
  aa9736f0aa31c24c939610dee4d441136e475bc1
- SHA256
  
  e9e718ce0a17c8d6f8b3acd616a4935192ce8a6edb80ef93f2104bdbdb38bbf5
- SHA512
  
  fdf304df55ed6c9104c94ca614d477068413b2a3e1a733eeee0e729f05a11f4f828cee981abf949e3644d60557655ff5dc8024fecfeb6bae17aed1349f41b9f6
- SSDEEP
  
  3072:YXbe3OJnOG0TjiKyJBjFDTxcP0nVT65YcNQMr/ZJuXruZ:Yy+EjS9TuP0SNQM7ZSyZ
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2