61554022c36d333ad83d78fd23af5bfc3ff037ad334c6ceb35f39a9c0a0a6e10 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebffca96d28ae2da356ea3c7fc2c61c8_JaffaCakes118
Size

160KB
Sample

240919-xqek9sveld
MD5

ebffca96d28ae2da356ea3c7fc2c61c8
SHA1

64b5fb0bc717893a16b2257aade0fb920f2e0c5c
SHA256

61554022c36d333ad83d78fd23af5bfc3ff037ad334c6ceb35f39a9c0a0a6e10
SHA512

0a16d7d538f6c297bcf137a2967547529084082413397ea62e9cc814d49f7b4c198dc4cf6adfc67d3a213ce1fd49b5638e8a40e5a8ee6324089e3097b5b552f4
SSDEEP

3072:8sDV6Az1lWgFvYGnJd6KKZV3uTN9WU/G9h3Gw590KqWbmzALbvl6:tQAKgFvYGJd6KKZV3uTN9WU/G9h2w591

Score

7^/10

Malware Config

Targets

- Target
  
  ebffca96d28ae2da356ea3c7fc2c61c8_JaffaCakes118
- Size
  
  160KB
- MD5
  
  ebffca96d28ae2da356ea3c7fc2c61c8
- SHA1
  
  64b5fb0bc717893a16b2257aade0fb920f2e0c5c
- SHA256
  
  61554022c36d333ad83d78fd23af5bfc3ff037ad334c6ceb35f39a9c0a0a6e10
- SHA512
  
  0a16d7d538f6c297bcf137a2967547529084082413397ea62e9cc814d49f7b4c198dc4cf6adfc67d3a213ce1fd49b5638e8a40e5a8ee6324089e3097b5b552f4
- SSDEEP
  
  3072:8sDV6Az1lWgFvYGnJd6KKZV3uTN9WU/G9h3Gw590KqWbmzALbvl6:tQAKgFvYGJd6KKZV3uTN9WU/G9h2w591
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2