fbae8a926023f7bf0f62fd60ccb2ac2f9550745170e9f69df66ec2c5b73c966b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

beee5da88111c7f5dfe582b8f7634142_JaffaCakes118
Size

2.5MB
Sample

240824-talsvsxeke
MD5

beee5da88111c7f5dfe582b8f7634142
SHA1

8736d3e4082cd4a1796a4f8038cde606140a6ac5
SHA256

fbae8a926023f7bf0f62fd60ccb2ac2f9550745170e9f69df66ec2c5b73c966b
SHA512

4930320a5d281e457fa70146afdf13a4ebeee2091dc28601fca2b8df8c1319b57b85534d4c0bc7cb604b7da1ecd108892f84ab9b8c09597b908f000e5cb557ab
SSDEEP

49152:/tKid8KH5vP5kkxIe9asY6DwOBfrnvV7UeWtcgHoxL:/Lj/ZjYiwOBpIeWugId

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  beee5da88111c7f5dfe582b8f7634142_JaffaCakes118
- Size
  
  2.5MB
- MD5
  
  beee5da88111c7f5dfe582b8f7634142
- SHA1
  
  8736d3e4082cd4a1796a4f8038cde606140a6ac5
- SHA256
  
  fbae8a926023f7bf0f62fd60ccb2ac2f9550745170e9f69df66ec2c5b73c966b
- SHA512
  
  4930320a5d281e457fa70146afdf13a4ebeee2091dc28601fca2b8df8c1319b57b85534d4c0bc7cb604b7da1ecd108892f84ab9b8c09597b908f000e5cb557ab
- SSDEEP
  
  49152:/tKid8KH5vP5kkxIe9asY6DwOBfrnvV7UeWtcgHoxL:/Lj/ZjYiwOBpIeWugId
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2