bccff4a07bc297faf95ffd3b8aab14f6133ec5acc3f67fbbc88511ac8edb2458 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7839b51cb038631184d8df3455380a0_JaffaCakes118
Size

101KB
Sample

240822-nzdwnayapl
MD5

b7839b51cb038631184d8df3455380a0
SHA1

3a6bb35d62fdbce9db8ef5f6b16908ae6cbb4b99
SHA256

bccff4a07bc297faf95ffd3b8aab14f6133ec5acc3f67fbbc88511ac8edb2458
SHA512

81bf52eba9fd1e2971b28d905c81fd821d42eec04d707f39a9fd9177604dbb454acd2e8c07d87fcbc71d4cdd873b48eacd3b2638a7a74cd0f6237d93aa298cd9
SSDEEP

1536:MGyegE0yBsdgQVsTIUxsTnPxrfzU598HSoRmeMivJv5fiwTm5VDuR:D15OgrIUxsTnPxbzU59Am3iRv5ZTyF

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b7839b51cb038631184d8df3455380a0_JaffaCakes118
- Size
  
  101KB
- MD5
  
  b7839b51cb038631184d8df3455380a0
- SHA1
  
  3a6bb35d62fdbce9db8ef5f6b16908ae6cbb4b99
- SHA256
  
  bccff4a07bc297faf95ffd3b8aab14f6133ec5acc3f67fbbc88511ac8edb2458
- SHA512
  
  81bf52eba9fd1e2971b28d905c81fd821d42eec04d707f39a9fd9177604dbb454acd2e8c07d87fcbc71d4cdd873b48eacd3b2638a7a74cd0f6237d93aa298cd9
- SSDEEP
  
  1536:MGyegE0yBsdgQVsTIUxsTnPxrfzU598HSoRmeMivJv5fiwTm5VDuR:D15OgrIUxsTnPxbzU59Am3iRv5ZTyF
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2