5598ddf35aac007ddfe263986ea1abf7fd79f138e5ca36223cbecc8d7dbbdb81 | Triage

Sharing

General

Target

fa90d947df8dbf76a527893cdf5ef994_JaffaCakes118
Size

109KB
Sample

240927-rpmmlaygmf
MD5

fa90d947df8dbf76a527893cdf5ef994
SHA1

0260f5a7ce07fd67a87e9a143ba168277c0e490e
SHA256

5598ddf35aac007ddfe263986ea1abf7fd79f138e5ca36223cbecc8d7dbbdb81
SHA512

6e1495de1e73f61aed3f5e4d2cd29d7a55f58aab56162a408bb3d6bd80cb1fbcd1d51788d7f73b82be44e7351ee7e10d78653278c56f291e9aeeeb0bad118d15
SSDEEP

3072:cXUw4HbBG1Wdo2OMAZ120rueYVDlkaJuBXpXHqoFIb:DwClGH/P/YtlCXq7

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  fa90d947df8dbf76a527893cdf5ef994_JaffaCakes118
- Size
  
  109KB
- MD5
  
  fa90d947df8dbf76a527893cdf5ef994
- SHA1
  
  0260f5a7ce07fd67a87e9a143ba168277c0e490e
- SHA256
  
  5598ddf35aac007ddfe263986ea1abf7fd79f138e5ca36223cbecc8d7dbbdb81
- SHA512
  
  6e1495de1e73f61aed3f5e4d2cd29d7a55f58aab56162a408bb3d6bd80cb1fbcd1d51788d7f73b82be44e7351ee7e10d78653278c56f291e9aeeeb0bad118d15
- SSDEEP
  
  3072:cXUw4HbBG1Wdo2OMAZ120rueYVDlkaJuBXpXHqoFIb:DwClGH/P/YtlCXq7
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2