ff641bd3e0fd97860c15c838bcc7334b89a9440a0bcdafac2e5db8e9fcf040ec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

698e2fe3ac8e2a91cff6ccfec8aeef2e_JaffaCakes118
Size

109KB
Sample

240724-apyanazhnc
MD5

698e2fe3ac8e2a91cff6ccfec8aeef2e
SHA1

741aecba985f63dfe77c6607e9af1615c5f87e61
SHA256

ff641bd3e0fd97860c15c838bcc7334b89a9440a0bcdafac2e5db8e9fcf040ec
SHA512

27519ea1491c6208c155d91f2878cccb12f420b3b3354a9eabcbd2e41bd5b558c80bbcc1d17075080a4eafef60d719b6f92d4bf075a544d0da91eb9a1d56c575
SSDEEP

3072:Rvo8VsYSrQ7F6wbiPHUOFp3ZnskGPIjj/yFIb:IQRi/UO73ZnTGPIjjZ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  698e2fe3ac8e2a91cff6ccfec8aeef2e_JaffaCakes118
- Size
  
  109KB
- MD5
  
  698e2fe3ac8e2a91cff6ccfec8aeef2e
- SHA1
  
  741aecba985f63dfe77c6607e9af1615c5f87e61
- SHA256
  
  ff641bd3e0fd97860c15c838bcc7334b89a9440a0bcdafac2e5db8e9fcf040ec
- SHA512
  
  27519ea1491c6208c155d91f2878cccb12f420b3b3354a9eabcbd2e41bd5b558c80bbcc1d17075080a4eafef60d719b6f92d4bf075a544d0da91eb9a1d56c575
- SSDEEP
  
  3072:Rvo8VsYSrQ7F6wbiPHUOFp3ZnskGPIjj/yFIb:IQRi/UO73ZnTGPIjjZ
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2