ff950fdfb5b0db15e5a22691b3a66730671f08d186b51cbd886b77e4863d96de | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83b52848ecd406821887ead3a1054eef_JaffaCakes118
Size

2KB
Sample

240809-1wqgha1dmm
MD5

83b52848ecd406821887ead3a1054eef
SHA1

1048e2a43962f0091a798bee8f34b1cfe1c7f889
SHA256

ff950fdfb5b0db15e5a22691b3a66730671f08d186b51cbd886b77e4863d96de
SHA512

122ab84a7da1296e29a842a816f3494dfafd44898f02b1135a37e13a9468e6ac88c2b0d279dfa57a4479373094aabfc012af37b6e16d64f8110885d1e41e7524

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  
  83b52848ecd406821887ead3a1054eef_JaffaCakes118
- Size
  
  2KB
- MD5
  
  83b52848ecd406821887ead3a1054eef
- SHA1
  
  1048e2a43962f0091a798bee8f34b1cfe1c7f889
- SHA256
  
  ff950fdfb5b0db15e5a22691b3a66730671f08d186b51cbd886b77e4863d96de
- SHA512
  
  122ab84a7da1296e29a842a816f3494dfafd44898f02b1135a37e13a9468e6ac88c2b0d279dfa57a4479373094aabfc012af37b6e16d64f8110885d1e41e7524
Score

7^/10

discovery execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

behavioral2

discoveryexecution