7201c9658127023184666154f9cd3d6f9c6f5bf8a1fd6dd0696bf9b895a42cdf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bcd6f1564e0c5e3fda1059b6d017b4e5_JaffaCakes118
Size

74KB
Sample

240823-xxevlstejn
MD5

bcd6f1564e0c5e3fda1059b6d017b4e5
SHA1

fd0a3cc536e3413cfdfad1fcac6f092cb049829d
SHA256

7201c9658127023184666154f9cd3d6f9c6f5bf8a1fd6dd0696bf9b895a42cdf
SHA512

55ec052818d0587054c495771cd8d93a9deb06348b2583dfeef626362171a9cee097d8dfb72fe00c0f813c1d074166d7164202af2411333516e118fefdcebd58
SSDEEP

1536:sqlDsZB2vakcyf7yRfnwCMRESbflMvpMrFuo8RzDG:5uB2vlfuR/8fzKpMrFb88

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  bcd6f1564e0c5e3fda1059b6d017b4e5_JaffaCakes118
- Size
  
  74KB
- MD5
  
  bcd6f1564e0c5e3fda1059b6d017b4e5
- SHA1
  
  fd0a3cc536e3413cfdfad1fcac6f092cb049829d
- SHA256
  
  7201c9658127023184666154f9cd3d6f9c6f5bf8a1fd6dd0696bf9b895a42cdf
- SHA512
  
  55ec052818d0587054c495771cd8d93a9deb06348b2583dfeef626362171a9cee097d8dfb72fe00c0f813c1d074166d7164202af2411333516e118fefdcebd58
- SSDEEP
  
  1536:sqlDsZB2vakcyf7yRfnwCMRESbflMvpMrFuo8RzDG:5uB2vlfuR/8fzKpMrFb88
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2