5b9d2473369ffca9305cfdd07b9d36f5932fe4fa208fff6663c9870cc863b22c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b86e159135ce12d4ac8b09315998ae93_JaffaCakes118
Size

188KB
Sample

240822-vna4ys1ajq
MD5

b86e159135ce12d4ac8b09315998ae93
SHA1

fdb3fc321797b3305ba64ad6e93cf6accca46432
SHA256

5b9d2473369ffca9305cfdd07b9d36f5932fe4fa208fff6663c9870cc863b22c
SHA512

4493bb87f0963ba32cbd73deb43de0f47b18f3a461b4ffd53ecfbac190cfe5201a4c33886b1768b31dc0a440c4613d277283a882d4dce0306c66e05a230fb1ae
SSDEEP

3072:gzgjO/Zd1RePDmZ8tf05iW4uxhCIsZRtAhbpV/ubXYi:gzgOjRePDm+G5iW9hCIspAhbpVmbv

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b86e159135ce12d4ac8b09315998ae93_JaffaCakes118
- Size
  
  188KB
- MD5
  
  b86e159135ce12d4ac8b09315998ae93
- SHA1
  
  fdb3fc321797b3305ba64ad6e93cf6accca46432
- SHA256
  
  5b9d2473369ffca9305cfdd07b9d36f5932fe4fa208fff6663c9870cc863b22c
- SHA512
  
  4493bb87f0963ba32cbd73deb43de0f47b18f3a461b4ffd53ecfbac190cfe5201a4c33886b1768b31dc0a440c4613d277283a882d4dce0306c66e05a230fb1ae
- SSDEEP
  
  3072:gzgjO/Zd1RePDmZ8tf05iW4uxhCIsZRtAhbpV/ubXYi:gzgOjRePDm+G5iW9hCIspAhbpVmbv
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2