fbd85188189ccdeabfe9f8ad9c0da24c20ce2ea1ad38a923ec0a2f49ff3f809b | Triage

Sharing

General

Target

a743dcf0275d64c35b0b1bc6542a4d13_JaffaCakes118
Size

252KB
Sample

240818-s98k8s1dlc
MD5

a743dcf0275d64c35b0b1bc6542a4d13
SHA1

9fa28a38f8f0a0e362a764fb66e73045287e3019
SHA256

fbd85188189ccdeabfe9f8ad9c0da24c20ce2ea1ad38a923ec0a2f49ff3f809b
SHA512

bfe9dc62355df31e3c3a5d0677dca4ebd22dd0212d30026c156751ca0a1043cdbb3b0c7005d8b15fdff9a5ae6de4beacc428c620cdea2d3a2dded9f2b237698d
SSDEEP

3072:+TJK5CeMQeMsRDnIP0b72RIzKq7VTT+ARLtAev7hgZfYIMGdSukbpah+HBJ0:+TJfDpa2zKqNTf5WNZwIMW2pxHBJ0

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a743dcf0275d64c35b0b1bc6542a4d13_JaffaCakes118
- Size
  
  252KB
- MD5
  
  a743dcf0275d64c35b0b1bc6542a4d13
- SHA1
  
  9fa28a38f8f0a0e362a764fb66e73045287e3019
- SHA256
  
  fbd85188189ccdeabfe9f8ad9c0da24c20ce2ea1ad38a923ec0a2f49ff3f809b
- SHA512
  
  bfe9dc62355df31e3c3a5d0677dca4ebd22dd0212d30026c156751ca0a1043cdbb3b0c7005d8b15fdff9a5ae6de4beacc428c620cdea2d3a2dded9f2b237698d
- SSDEEP
  
  3072:+TJK5CeMQeMsRDnIP0b72RIzKq7VTT+ARLtAev7hgZfYIMGdSukbpah+HBJ0:+TJfDpa2zKqNTf5WNZwIMW2pxHBJ0
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2