882dfcd48c6d80313ee7e53e4dd59a8b3af6ef41e718b1d76b8a2ba2884d8d46 | Triage

Sharing

General

Target

becf6ec716daa198307547084381a106_JaffaCakes118
Size

191KB
Sample

240824-r19lhawgqm
MD5

becf6ec716daa198307547084381a106
SHA1

404489f414d2cc5ff49237c6e0f5ef4d660f5dfc
SHA256

882dfcd48c6d80313ee7e53e4dd59a8b3af6ef41e718b1d76b8a2ba2884d8d46
SHA512

497258262c31af866c29a9ce680b70da4e6cdbdfdcac65922c223d380a6d25b9def17e024afadc1fbc335971ac94172bb8f2e40c3132cd51618915fabc6eb932
SSDEEP

3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0dj:HAVySV1eY4k437d+4wkTHdS2fT

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  becf6ec716daa198307547084381a106_JaffaCakes118
- Size
  
  191KB
- MD5
  
  becf6ec716daa198307547084381a106
- SHA1
  
  404489f414d2cc5ff49237c6e0f5ef4d660f5dfc
- SHA256
  
  882dfcd48c6d80313ee7e53e4dd59a8b3af6ef41e718b1d76b8a2ba2884d8d46
- SHA512
  
  497258262c31af866c29a9ce680b70da4e6cdbdfdcac65922c223d380a6d25b9def17e024afadc1fbc335971ac94172bb8f2e40c3132cd51618915fabc6eb932
- SSDEEP
  
  3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0dj:HAVySV1eY4k437d+4wkTHdS2fT
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2