c0b85b201769fd30b32a4ddd0e358327c6e889afc73e29fd959e91a2bd3ac684 | Triage

Sharing

General

Target

d6964781c12bf3ddb20a858d14a564d2_JaffaCakes118
Size

46KB
Sample

240909-srmaaavekr
MD5

d6964781c12bf3ddb20a858d14a564d2
SHA1

7789afb12830dfdb7970c7a78ca121e7e78233bd
SHA256

c0b85b201769fd30b32a4ddd0e358327c6e889afc73e29fd959e91a2bd3ac684
SHA512

2258ac8f1172147c3eb7c5ca84c679f4dd1ed242dc9949f11648f6a4e1fe7cae729ca7b40ac1ac82aec82f9989a899079000cee9010d849a1496bad52d2c2603
SSDEEP

768:nkw65AcP9AzkMdOHYOrqokFNFf5h7ElV6r6/G8HwJjwSz+5miMotKQ:nkw65AcP9MQQXFNhYlwrUG8wjwu+5lMU

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d6964781c12bf3ddb20a858d14a564d2_JaffaCakes118
- Size
  
  46KB
- MD5
  
  d6964781c12bf3ddb20a858d14a564d2
- SHA1
  
  7789afb12830dfdb7970c7a78ca121e7e78233bd
- SHA256
  
  c0b85b201769fd30b32a4ddd0e358327c6e889afc73e29fd959e91a2bd3ac684
- SHA512
  
  2258ac8f1172147c3eb7c5ca84c679f4dd1ed242dc9949f11648f6a4e1fe7cae729ca7b40ac1ac82aec82f9989a899079000cee9010d849a1496bad52d2c2603
- SSDEEP
  
  768:nkw65AcP9AzkMdOHYOrqokFNFf5h7ElV6r6/G8HwJjwSz+5miMotKQ:nkw65AcP9MQQXFNhYlwrUG8wjwu+5lMU
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2