90bcb8b307d5e864a0ab128c6f3b30e0a9b59a921fde5c285a92f6d5610aa729 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bab845f7d6b205028d3c153fa40146f6_JaffaCakes118
Size

206KB
Sample

240823-hdtr4asdlk
MD5

bab845f7d6b205028d3c153fa40146f6
SHA1

c23801c8eab1dc9a6991462c5c42c21fef9d707e
SHA256

90bcb8b307d5e864a0ab128c6f3b30e0a9b59a921fde5c285a92f6d5610aa729
SHA512

9f46ccd4a6b0f8b34c4fe37c9e10e50c4dad1c206075b16fe816ce732badeaa6b450cfe6c54b4a564512f2f333495b69d811b966d424bbfa1b86410743f1124d
SSDEEP

3072:iA/yzn2myhzoR73ax4ss38hw5Y+J1uDtf:iJnryk3I4s1halXuF

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  bab845f7d6b205028d3c153fa40146f6_JaffaCakes118
- Size
  
  206KB
- MD5
  
  bab845f7d6b205028d3c153fa40146f6
- SHA1
  
  c23801c8eab1dc9a6991462c5c42c21fef9d707e
- SHA256
  
  90bcb8b307d5e864a0ab128c6f3b30e0a9b59a921fde5c285a92f6d5610aa729
- SHA512
  
  9f46ccd4a6b0f8b34c4fe37c9e10e50c4dad1c206075b16fe816ce732badeaa6b450cfe6c54b4a564512f2f333495b69d811b966d424bbfa1b86410743f1124d
- SSDEEP
  
  3072:iA/yzn2myhzoR73ax4ss38hw5Y+J1uDtf:iJnryk3I4s1halXuF
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2