49086334db30e89281ca3ddc04f48c8339c22ede98a276ddc494f09022ab199f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bcb80a7baae4d1e64b1f30f9252b5129_JaffaCakes118
Size

109KB
Sample

240823-w626ts1hrm
MD5

bcb80a7baae4d1e64b1f30f9252b5129
SHA1

ac1842b60b0be9250e66a39276ed32e7f709ef02
SHA256

49086334db30e89281ca3ddc04f48c8339c22ede98a276ddc494f09022ab199f
SHA512

8ecc2751864d61ae2469b5291c5e55c593aa59853fbb930a5fdf657f86b1b15213fc1ea7937bb87afe35f8be284d14f68f4d8e1d751e59289390b032c7beaab0
SSDEEP

3072:Soc2PvmVnYEhXdOcWAX8DZ/1/I/+9MeFIb:bmVnhKAGSVN

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  bcb80a7baae4d1e64b1f30f9252b5129_JaffaCakes118
- Size
  
  109KB
- MD5
  
  bcb80a7baae4d1e64b1f30f9252b5129
- SHA1
  
  ac1842b60b0be9250e66a39276ed32e7f709ef02
- SHA256
  
  49086334db30e89281ca3ddc04f48c8339c22ede98a276ddc494f09022ab199f
- SHA512
  
  8ecc2751864d61ae2469b5291c5e55c593aa59853fbb930a5fdf657f86b1b15213fc1ea7937bb87afe35f8be284d14f68f4d8e1d751e59289390b032c7beaab0
- SSDEEP
  
  3072:Soc2PvmVnYEhXdOcWAX8DZ/1/I/+9MeFIb:bmVnhKAGSVN
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2