b2aeeb4c0ef9514322bcdbe6e6aa5ac14e89468c1bd89f1c9bcbc4c8b2cd4083 | Triage

Sharing

General

Target

976f5336536e691e0395eadd172c09b5_JaffaCakes118
Size

105KB
Sample

240814-yjmtqswarp
MD5

976f5336536e691e0395eadd172c09b5
SHA1

118f8113f5aeb6a2a2019e5f2155189e3f6e3f7b
SHA256

b2aeeb4c0ef9514322bcdbe6e6aa5ac14e89468c1bd89f1c9bcbc4c8b2cd4083
SHA512

7fa1f30cb44f83212433aa7051c8c49bdf861d57fcb70a53e0cb7dbcc76aac64a2aeca095925738b16e4c9c0430c45426f323542ff7d63671348f7a84c3071b5
SSDEEP

1536:5NrTZSSJw8oD5mmiKoBHgiLUffXWpkSv8652xDc7Q+BYrj76M:fTZhzoGlvLUnmn860c7LgX6M

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  976f5336536e691e0395eadd172c09b5_JaffaCakes118
- Size
  
  105KB
- MD5
  
  976f5336536e691e0395eadd172c09b5
- SHA1
  
  118f8113f5aeb6a2a2019e5f2155189e3f6e3f7b
- SHA256
  
  b2aeeb4c0ef9514322bcdbe6e6aa5ac14e89468c1bd89f1c9bcbc4c8b2cd4083
- SHA512
  
  7fa1f30cb44f83212433aa7051c8c49bdf861d57fcb70a53e0cb7dbcc76aac64a2aeca095925738b16e4c9c0430c45426f323542ff7d63671348f7a84c3071b5
- SSDEEP
  
  1536:5NrTZSSJw8oD5mmiKoBHgiLUffXWpkSv8652xDc7Q+BYrj76M:fTZhzoGlvLUnmn860c7LgX6M
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2