6419d47d6a0ea148c233d0aaaae6b0e6c3754b24825c826e3a142e73fecd898b | Triage

Sharing

General

Target

bf3e833a27cecb5aec18864cf5f35d59_JaffaCakes118
Size

115KB
Sample

240824-x38pwavdrh
MD5

bf3e833a27cecb5aec18864cf5f35d59
SHA1

e193c7bee6faff628ec1c0b7443eae48b13f3854
SHA256

6419d47d6a0ea148c233d0aaaae6b0e6c3754b24825c826e3a142e73fecd898b
SHA512

c5548c1c200c4a0f8db4ad015ff435bbc81c8e29a2aab6c5de405cc88a6beb67318b8cd3c1f340f23c2478fd5e00e36505559a52e361606b854a22c9ad8256e9
SSDEEP

3072:rvkGO9TMGNG0WycxnvdwOxQZbGL6msFhx2DmFA2:TkGmMGky+iO+GCh0DAz

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  bf3e833a27cecb5aec18864cf5f35d59_JaffaCakes118
- Size
  
  115KB
- MD5
  
  bf3e833a27cecb5aec18864cf5f35d59
- SHA1
  
  e193c7bee6faff628ec1c0b7443eae48b13f3854
- SHA256
  
  6419d47d6a0ea148c233d0aaaae6b0e6c3754b24825c826e3a142e73fecd898b
- SHA512
  
  c5548c1c200c4a0f8db4ad015ff435bbc81c8e29a2aab6c5de405cc88a6beb67318b8cd3c1f340f23c2478fd5e00e36505559a52e361606b854a22c9ad8256e9
- SSDEEP
  
  3072:rvkGO9TMGNG0WycxnvdwOxQZbGL6msFhx2DmFA2:TkGmMGky+iO+GCh0DAz
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2