23cb94b2a18b681af68b582d42d3f18de624e0674106d61bc786eac7784b5246 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3380b797358de8156f3fdf76cc385c9_JaffaCakes118
Size

76KB
Sample

240817-tlxdqsxcrm
MD5

a3380b797358de8156f3fdf76cc385c9
SHA1

88697651a35769bd686d4759617b5f6a88578fa1
SHA256

23cb94b2a18b681af68b582d42d3f18de624e0674106d61bc786eac7784b5246
SHA512

e63d539e46ed2ebe7f7b21e1aebf59377b171b9838251caf99276f1d29dabcb6787838c4a8296d25f0b923666631c58c1d950c1e3e00300f0119a84b2b794182
SSDEEP

1536:nXHAMT7T5/MWIKU+u1MQGBlU7iumJ/ESYkb2FHO5OqL:VT7qWIKa1MQf7iu8/NbauUqL

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a3380b797358de8156f3fdf76cc385c9_JaffaCakes118
- Size
  
  76KB
- MD5
  
  a3380b797358de8156f3fdf76cc385c9
- SHA1
  
  88697651a35769bd686d4759617b5f6a88578fa1
- SHA256
  
  23cb94b2a18b681af68b582d42d3f18de624e0674106d61bc786eac7784b5246
- SHA512
  
  e63d539e46ed2ebe7f7b21e1aebf59377b171b9838251caf99276f1d29dabcb6787838c4a8296d25f0b923666631c58c1d950c1e3e00300f0119a84b2b794182
- SSDEEP
  
  1536:nXHAMT7T5/MWIKU+u1MQGBlU7iumJ/ESYkb2FHO5OqL:VT7qWIKa1MQf7iu8/NbauUqL
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2