8de9fbbb2473e6a0fccf2a604bdd7a9bc770f65890a4b01eda632ac1852029a1 | Triage

Sharing

General

Target

b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118
Size

897KB
Sample

240821-qgtv9stcqn
MD5

b39838fbc2ad08718f1a6a5a6348e9d6
SHA1

e1163c2b3c84f107ec2385a7414312ebf8b5ad0e
SHA256

8de9fbbb2473e6a0fccf2a604bdd7a9bc770f65890a4b01eda632ac1852029a1
SHA512

30ae79510022290e685c09f787d77ba42a840bf7014c2eb244193c2772ce7c5d823462455eadc6815cf8f4559b43cc11c1958f0622d628d1d7dfd6eb655e940a
SSDEEP

12288:Z0oQRsVUoS1TNFvfjBdDPS6TdauPQYCuu1IshXzlGdv1BsHT0NbsuC:+fRPh1xFvbbD/Y1ws1zSv1BsHT0NIX

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118
- Size
  
  897KB
- MD5
  
  b39838fbc2ad08718f1a6a5a6348e9d6
- SHA1
  
  e1163c2b3c84f107ec2385a7414312ebf8b5ad0e
- SHA256
  
  8de9fbbb2473e6a0fccf2a604bdd7a9bc770f65890a4b01eda632ac1852029a1
- SHA512
  
  30ae79510022290e685c09f787d77ba42a840bf7014c2eb244193c2772ce7c5d823462455eadc6815cf8f4559b43cc11c1958f0622d628d1d7dfd6eb655e940a
- SSDEEP
  
  12288:Z0oQRsVUoS1TNFvfjBdDPS6TdauPQYCuu1IshXzlGdv1BsHT0NbsuC:+fRPh1xFvbbD/Y1ws1zSv1BsHT0NIX
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2