7f578086516dadf6c81676083ffcf6b4197ef025cf216e61d4f921b19928168a | Triage

Sharing

General

Target

e1c570237d306f7d59f050e9b5cf91ad_JaffaCakes118
Size

168KB
Sample

240915-fymheaxcmb
MD5

e1c570237d306f7d59f050e9b5cf91ad
SHA1

44a238cd9f0521f3bfce77e77d58a57b629e2c82
SHA256

7f578086516dadf6c81676083ffcf6b4197ef025cf216e61d4f921b19928168a
SHA512

68645d0caea757a4d9fc4303b50d46303a5523a3661f002ff5004e3571147bf4d839677914bb076c088dd633e9ffa3e2aed28a3303dd9121cecb7254019928d9
SSDEEP

3072:Liv0QNjJmK5dDaqUh2+xZj+O/lsY7WDTCtdwOA7cpVtaEva:LiC0UpsJM7tWgJam

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e1c570237d306f7d59f050e9b5cf91ad_JaffaCakes118
- Size
  
  168KB
- MD5
  
  e1c570237d306f7d59f050e9b5cf91ad
- SHA1
  
  44a238cd9f0521f3bfce77e77d58a57b629e2c82
- SHA256
  
  7f578086516dadf6c81676083ffcf6b4197ef025cf216e61d4f921b19928168a
- SHA512
  
  68645d0caea757a4d9fc4303b50d46303a5523a3661f002ff5004e3571147bf4d839677914bb076c088dd633e9ffa3e2aed28a3303dd9121cecb7254019928d9
- SSDEEP
  
  3072:Liv0QNjJmK5dDaqUh2+xZj+O/lsY7WDTCtdwOA7cpVtaEva:LiC0UpsJM7tWgJam
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2