6605a6dc565e0eaf7142d44103642de2ea3507d7adfb45b1278918de318e29d6 | Triage

Sharing

General

Target

db8b270c5cc477187f5e5ef2851c5d74_JaffaCakes118
Size

213KB
Sample

240912-be4v5ashnk
MD5

db8b270c5cc477187f5e5ef2851c5d74
SHA1

03d959adaa58d75cc6b6a28a46bb48a1a31c8bc0
SHA256

6605a6dc565e0eaf7142d44103642de2ea3507d7adfb45b1278918de318e29d6
SHA512

1fb0f619c6eeeb9015032066679b7776e25a5880022f2e71f2731b1110df4ce98c2a45b2f21a26edbb310c593df7b97fe7104c8f2bdd9bb7be338916d6a5de67
SSDEEP

3072:WGf6viAIxc9LNyRulW1fyNi2i9sniSK0qt94kJ+7fno7DFkMO3jF9G:WGuCxciuW1Ksvp0q907Q7DF43jF

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  db8b270c5cc477187f5e5ef2851c5d74_JaffaCakes118
- Size
  
  213KB
- MD5
  
  db8b270c5cc477187f5e5ef2851c5d74
- SHA1
  
  03d959adaa58d75cc6b6a28a46bb48a1a31c8bc0
- SHA256
  
  6605a6dc565e0eaf7142d44103642de2ea3507d7adfb45b1278918de318e29d6
- SHA512
  
  1fb0f619c6eeeb9015032066679b7776e25a5880022f2e71f2731b1110df4ce98c2a45b2f21a26edbb310c593df7b97fe7104c8f2bdd9bb7be338916d6a5de67
- SSDEEP
  
  3072:WGf6viAIxc9LNyRulW1fyNi2i9sniSK0qt94kJ+7fno7DFkMO3jF9G:WGuCxciuW1Ksvp0q907Q7DF43jF
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2