0cf5b808717d24b95748844d0af60e814848f5cb811c2b0da152cc062e63869c | Triage

Sharing

General

Target

b57d7a7921db66b055bbfd447e26b9f1_JaffaCakes118
Size

114KB
Sample

240821-3kte5azhlr
MD5

b57d7a7921db66b055bbfd447e26b9f1
SHA1

de3d345049865ad06a7179ac8f1c1a79d731b0f5
SHA256

0cf5b808717d24b95748844d0af60e814848f5cb811c2b0da152cc062e63869c
SHA512

836f0f0a89375731eb2781e54821942b8ca37205dcc81859405fe324c24a01680ae52d2793b86d0f735ed9e061a848e830fdef9cd4e3764e19766a597d08c039
SSDEEP

3072:7KBb1jGSXBQ5bc3uLTCwos555YjoqT0EFIb:81jGSX8b/LTwsaoL

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b57d7a7921db66b055bbfd447e26b9f1_JaffaCakes118
- Size
  
  114KB
- MD5
  
  b57d7a7921db66b055bbfd447e26b9f1
- SHA1
  
  de3d345049865ad06a7179ac8f1c1a79d731b0f5
- SHA256
  
  0cf5b808717d24b95748844d0af60e814848f5cb811c2b0da152cc062e63869c
- SHA512
  
  836f0f0a89375731eb2781e54821942b8ca37205dcc81859405fe324c24a01680ae52d2793b86d0f735ed9e061a848e830fdef9cd4e3764e19766a597d08c039
- SSDEEP
  
  3072:7KBb1jGSXBQ5bc3uLTCwos555YjoqT0EFIb:81jGSX8b/LTwsaoL
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2