f250724b391f3da1e71ffacb2bcdf03032f5e1f828f0280561e0ac15c03160d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b11bd1bbecae6acac09e165095db0639_JaffaCakes118
Size

114KB
Sample

240820-2gzbja1anl
MD5

b11bd1bbecae6acac09e165095db0639
SHA1

1b01e15d5ebbe8e9a6df48d9ab61746fd876bb84
SHA256

f250724b391f3da1e71ffacb2bcdf03032f5e1f828f0280561e0ac15c03160d8
SHA512

3393fc3bc357a16aebf138cfaeb75f83aa0fa69fc71ca443d77fe423ea0e810b4bbf5788a19be8f3b4d081dbb706b242a41865c67d70460e20c62cc211a93124
SSDEEP

3072:5KBb1jGSXBQ5bc3uLTCwos555YjoqT0EFIb:i1jGSX8b/LTwsaoL

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b11bd1bbecae6acac09e165095db0639_JaffaCakes118
- Size
  
  114KB
- MD5
  
  b11bd1bbecae6acac09e165095db0639
- SHA1
  
  1b01e15d5ebbe8e9a6df48d9ab61746fd876bb84
- SHA256
  
  f250724b391f3da1e71ffacb2bcdf03032f5e1f828f0280561e0ac15c03160d8
- SHA512
  
  3393fc3bc357a16aebf138cfaeb75f83aa0fa69fc71ca443d77fe423ea0e810b4bbf5788a19be8f3b4d081dbb706b242a41865c67d70460e20c62cc211a93124
- SSDEEP
  
  3072:5KBb1jGSXBQ5bc3uLTCwos555YjoqT0EFIb:i1jGSX8b/LTwsaoL
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2