41e0e7c2ee6ddbd98985f9f1385ab89e82017886d2ddf796556c7a311d0856e6 | Triage

Sharing

General

Target

d30d476c6e8b9af349adbd1bfc63a698_JaffaCakes118
Size

109KB
Sample

240907-3gjfratekg
MD5

d30d476c6e8b9af349adbd1bfc63a698
SHA1

4574bbb7b4e12688748d735a47e22fb642fd9c5f
SHA256

41e0e7c2ee6ddbd98985f9f1385ab89e82017886d2ddf796556c7a311d0856e6
SHA512

4aafe7cff174f1764bdefc92810fa9f80f8b972e772cb3e722943a984450933bbc815d33436303156fe014a54392c31e545b5e101aefc6e57fdd2804cacf8a76
SSDEEP

3072:5si+XmpcDI5ba6jiH3gVc614JTq4i0lkYo2OEwwSW5D5VFIb:Gej1x14J2UkT2OEHk

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d30d476c6e8b9af349adbd1bfc63a698_JaffaCakes118
- Size
  
  109KB
- MD5
  
  d30d476c6e8b9af349adbd1bfc63a698
- SHA1
  
  4574bbb7b4e12688748d735a47e22fb642fd9c5f
- SHA256
  
  41e0e7c2ee6ddbd98985f9f1385ab89e82017886d2ddf796556c7a311d0856e6
- SHA512
  
  4aafe7cff174f1764bdefc92810fa9f80f8b972e772cb3e722943a984450933bbc815d33436303156fe014a54392c31e545b5e101aefc6e57fdd2804cacf8a76
- SSDEEP
  
  3072:5si+XmpcDI5ba6jiH3gVc614JTq4i0lkYo2OEwwSW5D5VFIb:Gej1x14J2UkT2OEHk
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2