a0b83514c888d579f5277c68ffa16ee03f256c6653845438a4c96fc204d2bf8e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a486b778f7cf63614dbe93a575b61e35_JaffaCakes118
Size

89KB
Sample

240817-27jc1avgpp
MD5

a486b778f7cf63614dbe93a575b61e35
SHA1

c4f929db0edc74faa9e158dd8639b51eef2ccecd
SHA256

a0b83514c888d579f5277c68ffa16ee03f256c6653845438a4c96fc204d2bf8e
SHA512

a7a37275cf43ec768efedd643a57bacc6990c74dbb51e70f06e7c52c5121d447d102cdbd6fcb35b5ec4e4a1fa15bc4c3a1a0269ace6cfc21bf3e9407914f0e48
SSDEEP

1536:9YrB6H5xMxou3VZo/nRiFf84lI1wxalVjSMGV54l0xJeg3nBkmUVw43JBZtpcvva:sB45xMxoMVZkRa3GwxS+4l4egxkmiBZT

Score

7^/10

defense_evasion discovery

Malware Config

Targets

- Target
  
  a486b778f7cf63614dbe93a575b61e35_JaffaCakes118
- Size
  
  89KB
- MD5
  
  a486b778f7cf63614dbe93a575b61e35
- SHA1
  
  c4f929db0edc74faa9e158dd8639b51eef2ccecd
- SHA256
  
  a0b83514c888d579f5277c68ffa16ee03f256c6653845438a4c96fc204d2bf8e
- SHA512
  
  a7a37275cf43ec768efedd643a57bacc6990c74dbb51e70f06e7c52c5121d447d102cdbd6fcb35b5ec4e4a1fa15bc4c3a1a0269ace6cfc21bf3e9407914f0e48
- SSDEEP
  
  1536:9YrB6H5xMxou3VZo/nRiFf84lI1wxalVjSMGV54l0xJeg3nBkmUVw43JBZtpcvva:sB45xMxoMVZkRa3GwxS+4l4egxkmiBZT
Score

7^/10

defense_evasion discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

File Deletion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

behavioral2

defense_evasiondiscovery