d2d1d29907f835af2ccecf491266d508df9fdbc3c8d2ee9435afd2fa3b19f12f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ffecd8f5a65cba77ad029cb0aa2183f_JaffaCakes118
Size

56KB
Sample

240725-rzp6gatfnr
MD5

6ffecd8f5a65cba77ad029cb0aa2183f
SHA1

4fb37245711d103149fce34be0b970490b470ace
SHA256

d2d1d29907f835af2ccecf491266d508df9fdbc3c8d2ee9435afd2fa3b19f12f
SHA512

7b696b79697ec6008db3409fdf585fd7d88dfed679479597f241133c63ade7a2967b22ae10b0cfaa8e46364572d305fae82755296db8c2541955763ba10406cf
SSDEEP

768:Zo+JMJbKNYTLmDlz5TEFRHft5ow5Adi1tPS8AA6x2FNxxz2m0Dh5:W+WJ6dEFZ7ouAi1ta8n6xAER15

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  6ffecd8f5a65cba77ad029cb0aa2183f_JaffaCakes118
- Size
  
  56KB
- MD5
  
  6ffecd8f5a65cba77ad029cb0aa2183f
- SHA1
  
  4fb37245711d103149fce34be0b970490b470ace
- SHA256
  
  d2d1d29907f835af2ccecf491266d508df9fdbc3c8d2ee9435afd2fa3b19f12f
- SHA512
  
  7b696b79697ec6008db3409fdf585fd7d88dfed679479597f241133c63ade7a2967b22ae10b0cfaa8e46364572d305fae82755296db8c2541955763ba10406cf
- SSDEEP
  
  768:Zo+JMJbKNYTLmDlz5TEFRHft5ow5Adi1tPS8AA6x2FNxxz2m0Dh5:W+WJ6dEFZ7ouAi1ta8n6xAER15
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2