25b7ebfaa0f6b84a0131ed4e526696193b344341d5c53982eeb9040d06aff33b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa89415a44271b6f7ebd078243b2fc97_JaffaCakes118
Size

69KB
Sample

240927-rbf8nawbjj
MD5

fa89415a44271b6f7ebd078243b2fc97
SHA1

946c8e18fcebdd004a3c9ad491dec389dc3ea77f
SHA256

25b7ebfaa0f6b84a0131ed4e526696193b344341d5c53982eeb9040d06aff33b
SHA512

6bd30c2bb2f38dc112bd62493efeeb0fe8ec497215965083f2b847307501b894112cbde32803d1d9e9c8251cfb9c4ec9fed5b3e3bcf70c5f1f4df60e227478df
SSDEEP

1536:QYhN+JA33e8kzKV+dMKgk2WkX7kUUYsZuGqq+p:Qa+JA3OFKV+i3Wky5uGkp

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  fa89415a44271b6f7ebd078243b2fc97_JaffaCakes118
- Size
  
  69KB
- MD5
  
  fa89415a44271b6f7ebd078243b2fc97
- SHA1
  
  946c8e18fcebdd004a3c9ad491dec389dc3ea77f
- SHA256
  
  25b7ebfaa0f6b84a0131ed4e526696193b344341d5c53982eeb9040d06aff33b
- SHA512
  
  6bd30c2bb2f38dc112bd62493efeeb0fe8ec497215965083f2b847307501b894112cbde32803d1d9e9c8251cfb9c4ec9fed5b3e3bcf70c5f1f4df60e227478df
- SSDEEP
  
  1536:QYhN+JA33e8kzKV+dMKgk2WkX7kUUYsZuGqq+p:Qa+JA3OFKV+i3Wky5uGkp
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2