683f2ae5bb714619ebfbbbecfac9edca91568ecfb11a4eaa32c03fb045c17782 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88cf0a25a3c76cbfda973a9db4350558_JaffaCakes118
Size

112KB
Sample

240811-dxep3axana
MD5

88cf0a25a3c76cbfda973a9db4350558
SHA1

ae85e4493c4aeec3f3a936101ae597cd4a0be974
SHA256

683f2ae5bb714619ebfbbbecfac9edca91568ecfb11a4eaa32c03fb045c17782
SHA512

5c7c2f245d5e5919d551e14de16ecfae962c8337a7d19d15868f6dba048a9d4ba6acb4004d089f6d34c97ddbfb751587e989e22a9128e23208ec742eb0e6beaa
SSDEEP

3072:foN4eb8nd+YaHKk0K/nPE173NJkTB+nuvgKMSfFIb:wN4eb8nd+YgNv817NJIB+uvTM5

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  88cf0a25a3c76cbfda973a9db4350558_JaffaCakes118
- Size
  
  112KB
- MD5
  
  88cf0a25a3c76cbfda973a9db4350558
- SHA1
  
  ae85e4493c4aeec3f3a936101ae597cd4a0be974
- SHA256
  
  683f2ae5bb714619ebfbbbecfac9edca91568ecfb11a4eaa32c03fb045c17782
- SHA512
  
  5c7c2f245d5e5919d551e14de16ecfae962c8337a7d19d15868f6dba048a9d4ba6acb4004d089f6d34c97ddbfb751587e989e22a9128e23208ec742eb0e6beaa
- SSDEEP
  
  3072:foN4eb8nd+YaHKk0K/nPE173NJkTB+nuvgKMSfFIb:wN4eb8nd+YgNv817NJIB+uvTM5
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2