c96098f7a8c67a8e53e38f84231122c09efcb03268afa4b1632a5d77b36168b5 | Triage

Sharing

General

Target

abb9c6da1659ac4eb2cc9de483a5b31d_JaffaCakes118
Size

3KB
Sample

240819-twtetsthmf
MD5

abb9c6da1659ac4eb2cc9de483a5b31d
SHA1

972865b2d970e038741b23e6dc40c7c60689fed6
SHA256

c96098f7a8c67a8e53e38f84231122c09efcb03268afa4b1632a5d77b36168b5
SHA512

b2d4939b8a038abdbcc2e64ea9c68d187962bb90c71a43e51038bc0ac3e66a00f961a538486ddc711e46e7ee78799fd962b30308aca55da900fa2c7f5d33102f

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  abb9c6da1659ac4eb2cc9de483a5b31d_JaffaCakes118
- Size
  
  3KB
- MD5
  
  abb9c6da1659ac4eb2cc9de483a5b31d
- SHA1
  
  972865b2d970e038741b23e6dc40c7c60689fed6
- SHA256
  
  c96098f7a8c67a8e53e38f84231122c09efcb03268afa4b1632a5d77b36168b5
- SHA512
  
  b2d4939b8a038abdbcc2e64ea9c68d187962bb90c71a43e51038bc0ac3e66a00f961a538486ddc711e46e7ee78799fd962b30308aca55da900fa2c7f5d33102f
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2