6c2f169ba2a1957be9b78c5e6ef20adacba0f2dbb077ee98cde559925c3d9496 | Triage

Sharing

General

Target

6f03301c0f7d918ea517ad6a8ed00eee_JaffaCakes118
Size

28KB
Sample

240725-le5grstcrh
MD5

6f03301c0f7d918ea517ad6a8ed00eee
SHA1

49c8ace78900e13cfbb3194974dc161bf7fc641f
SHA256

6c2f169ba2a1957be9b78c5e6ef20adacba0f2dbb077ee98cde559925c3d9496
SHA512

94e1815d933f71317ee4c8753a42b60bf448df59e6c14a84be2a43174d723ac9269a9cb13dfd33eda2eae3cae2a95240434503ae5a0411481b7a20c7d1c751c3
SSDEEP

384:m2INS2vraohrKbSC05Hk/HNWdqLcIrPxctgiAU++4AtCyQRKIFUTCSV0Q+U0cGow:gTYSVHSNWgLnlUXqRKIS+3UBQvo

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  
  6f03301c0f7d918ea517ad6a8ed00eee_JaffaCakes118
- Size
  
  28KB
- MD5
  
  6f03301c0f7d918ea517ad6a8ed00eee
- SHA1
  
  49c8ace78900e13cfbb3194974dc161bf7fc641f
- SHA256
  
  6c2f169ba2a1957be9b78c5e6ef20adacba0f2dbb077ee98cde559925c3d9496
- SHA512
  
  94e1815d933f71317ee4c8753a42b60bf448df59e6c14a84be2a43174d723ac9269a9cb13dfd33eda2eae3cae2a95240434503ae5a0411481b7a20c7d1c751c3
- SSDEEP
  
  384:m2INS2vraohrKbSC05Hk/HNWdqLcIrPxctgiAU++4AtCyQRKIFUTCSV0Q+U0cGow:gTYSVHSNWgLnlUXqRKIS+3UBQvo
Score

7^/10

discovery execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

behavioral2

discoveryexecution