f2417653083b3009a0054a808951c5f50c6aacded3bb2c516fd70d96d8fab860 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af175acd9e1da5c5621b5aa5c8f1b929_JaffaCakes118
Size

192KB
Sample

240820-nxlhqazdjh
MD5

af175acd9e1da5c5621b5aa5c8f1b929
SHA1

5192519242d2758a259489afe58a660a49bb98fb
SHA256

f2417653083b3009a0054a808951c5f50c6aacded3bb2c516fd70d96d8fab860
SHA512

b94c487e416048f45323d227d4019a6f2aa0a9e8e75bc65890386580805efc1dd67d14ec3bb45f801e76c484e44f33f7077729c3d5a07ee4dd21434999c546ef
SSDEEP

1536:sKgUtLQoTyQaVVVR7b9fLsVsZSUqOpBvglkkkkuLfKBnVKMkYIR3/XMFe:DgUtsoyQq9X6gBvglZYPXMFe

Score

7^/10

Malware Config

Targets

- Target
  
  af175acd9e1da5c5621b5aa5c8f1b929_JaffaCakes118
- Size
  
  192KB
- MD5
  
  af175acd9e1da5c5621b5aa5c8f1b929
- SHA1
  
  5192519242d2758a259489afe58a660a49bb98fb
- SHA256
  
  f2417653083b3009a0054a808951c5f50c6aacded3bb2c516fd70d96d8fab860
- SHA512
  
  b94c487e416048f45323d227d4019a6f2aa0a9e8e75bc65890386580805efc1dd67d14ec3bb45f801e76c484e44f33f7077729c3d5a07ee4dd21434999c546ef
- SSDEEP
  
  1536:sKgUtLQoTyQaVVVR7b9fLsVsZSUqOpBvglkkkkuLfKBnVKMkYIR3/XMFe:DgUtsoyQq9X6gBvglZYPXMFe
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2