977c648abba0aa99e61b7c4e90778ae9f09e820cac8aaa15228652ee8565b556 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e095d5c7fc6486dd114e710cb7e197ca_JaffaCakes118
Size

213KB
Sample

240914-t3vlgatcpk
MD5

e095d5c7fc6486dd114e710cb7e197ca
SHA1

28865c6d5df031292189d8248e5f282aebb821b8
SHA256

977c648abba0aa99e61b7c4e90778ae9f09e820cac8aaa15228652ee8565b556
SHA512

5e562b19b52d85c25bc2adafd89c5ddadf4b96b3fcf1afd12243e0d0dd4189354f4f01290a388d583a842c7008940e7b6dc3308dbcc797b6314d7e5c034fbf2e
SSDEEP

3072:1lJ51nZ7RRfH1fdFmtSQVKmqhsSsv7R97Hd/z9/VTnkeNyq+v26AamMjc59SX:jJ51nZp0Sutky97HhBt4eM2O9jASX

Score

7^/10

defense_evasion discovery

Malware Config

Targets

- Target
  
  e095d5c7fc6486dd114e710cb7e197ca_JaffaCakes118
- Size
  
  213KB
- MD5
  
  e095d5c7fc6486dd114e710cb7e197ca
- SHA1
  
  28865c6d5df031292189d8248e5f282aebb821b8
- SHA256
  
  977c648abba0aa99e61b7c4e90778ae9f09e820cac8aaa15228652ee8565b556
- SHA512
  
  5e562b19b52d85c25bc2adafd89c5ddadf4b96b3fcf1afd12243e0d0dd4189354f4f01290a388d583a842c7008940e7b6dc3308dbcc797b6314d7e5c034fbf2e
- SSDEEP
  
  3072:1lJ51nZ7RRfH1fdFmtSQVKmqhsSsv7R97Hd/z9/VTnkeNyq+v26AamMjc59SX:jJ51nZp0Sutky97HhBt4eM2O9jASX
Score

7^/10

defense_evasion discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

File Deletion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

behavioral2

defense_evasiondiscovery