e44dd5a32248b85fe65287082d0690013365b2580694d5b615a5b6d93b077b54 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc1490e04c3b070e70bed3bff2f1bf6e_JaffaCakes118
Size

73KB
Sample

240912-jfnvasyckf
MD5

dc1490e04c3b070e70bed3bff2f1bf6e
SHA1

e2099bdeb473559222089cf53c7aa8ee52f85a81
SHA256

e44dd5a32248b85fe65287082d0690013365b2580694d5b615a5b6d93b077b54
SHA512

2d832aa171022ad56805ad3c855abc45290378d5d8c36bc08f256c9665a3bd41793fef412977328d2522eebd5b36c97a9f40a15a6f3cdfd4fbf9bb897ae3b676
SSDEEP

1536:4LbwC+enZ4A/5ldZ9EdXFqRcGWUmRxd01Ml6tq7ULLmq/:QTnZ4wAXAvjmHd0gsRp

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  dc1490e04c3b070e70bed3bff2f1bf6e_JaffaCakes118
- Size
  
  73KB
- MD5
  
  dc1490e04c3b070e70bed3bff2f1bf6e
- SHA1
  
  e2099bdeb473559222089cf53c7aa8ee52f85a81
- SHA256
  
  e44dd5a32248b85fe65287082d0690013365b2580694d5b615a5b6d93b077b54
- SHA512
  
  2d832aa171022ad56805ad3c855abc45290378d5d8c36bc08f256c9665a3bd41793fef412977328d2522eebd5b36c97a9f40a15a6f3cdfd4fbf9bb897ae3b676
- SSDEEP
  
  1536:4LbwC+enZ4A/5ldZ9EdXFqRcGWUmRxd01Ml6tq7ULLmq/:QTnZ4wAXAvjmHd0gsRp
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2