f1f6189c7e85f82419fa2aaf14853e2eb288c098149c3d18e3a3c61436cc5f09 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dee2b5b2874468ad8451e565e6492a9d_JaffaCakes118
Size

22KB
Sample

240913-zqe8xaybmp
MD5

dee2b5b2874468ad8451e565e6492a9d
SHA1

ea8a3e34b6afb3527ed0ff0ea8c14fda3954a4cb
SHA256

f1f6189c7e85f82419fa2aaf14853e2eb288c098149c3d18e3a3c61436cc5f09
SHA512

8cebddc6b8572fed777263f1a5fa89f178c8ae62a7059c3e34e7b8be393b39c7d13fd9610f0395b0cd6ed024e8c25f7b10007658975ede58c6542b887c7182ef
SSDEEP

384:8OU+IDLczLwq5jBohvULbpgQ7+wHb66EVtE4+TNAFniouAUqQ:8D+I8zLwqTrFgQ75660+TGFiNmQ

Score

7^/10

defense_evasion discovery

Malware Config

Targets

- Target
  
  dee2b5b2874468ad8451e565e6492a9d_JaffaCakes118
- Size
  
  22KB
- MD5
  
  dee2b5b2874468ad8451e565e6492a9d
- SHA1
  
  ea8a3e34b6afb3527ed0ff0ea8c14fda3954a4cb
- SHA256
  
  f1f6189c7e85f82419fa2aaf14853e2eb288c098149c3d18e3a3c61436cc5f09
- SHA512
  
  8cebddc6b8572fed777263f1a5fa89f178c8ae62a7059c3e34e7b8be393b39c7d13fd9610f0395b0cd6ed024e8c25f7b10007658975ede58c6542b887c7182ef
- SSDEEP
  
  384:8OU+IDLczLwq5jBohvULbpgQ7+wHb66EVtE4+TNAFniouAUqQ:8D+I8zLwqTrFgQ75660+TGFiNmQ
Score

7^/10

defense_evasion discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

File Deletion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

behavioral2

defense_evasiondiscovery