4a5f9ad25882ba6a65e1f6907942421695127d7699f2bdf492a3878b32d45366 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a171e5002e47f0fe03bbc9a6cec99f69_JaffaCakes118
Size

150KB
Sample

240817-graeyatflr
MD5

a171e5002e47f0fe03bbc9a6cec99f69
SHA1

f5b0491bedd8f971044db6fb701d968e15ed4194
SHA256

4a5f9ad25882ba6a65e1f6907942421695127d7699f2bdf492a3878b32d45366
SHA512

bbdcc95614d62798aa68faab7ee5326d50e28a9ab4e946485be745d31430cc3668fdab2464fa0e67d73cd5007632b8898418784a1ca5adff89c9f00dba4521b6
SSDEEP

3072:Gwbhj04GjX6kgqbCwnnYRBviAdGEFcnzO/ttXZaNetcZ5fT+/+hbp:/bN04GjKFqbCwnYRBviAdGECnzOvXZaf

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a171e5002e47f0fe03bbc9a6cec99f69_JaffaCakes118
- Size
  
  150KB
- MD5
  
  a171e5002e47f0fe03bbc9a6cec99f69
- SHA1
  
  f5b0491bedd8f971044db6fb701d968e15ed4194
- SHA256
  
  4a5f9ad25882ba6a65e1f6907942421695127d7699f2bdf492a3878b32d45366
- SHA512
  
  bbdcc95614d62798aa68faab7ee5326d50e28a9ab4e946485be745d31430cc3668fdab2464fa0e67d73cd5007632b8898418784a1ca5adff89c9f00dba4521b6
- SSDEEP
  
  3072:Gwbhj04GjX6kgqbCwnnYRBviAdGEFcnzO/ttXZaNetcZ5fT+/+hbp:/bN04GjKFqbCwnYRBviAdGECnzOvXZaf
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2