96d9f48df470a6e786d5b2c6126803d556a304bf8a3facd5b12911df63beca1a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd70152582f096bf002de9303ca18025_JaffaCakes118
Size

980KB
Sample

240929-ank9pssdjq
MD5

fd70152582f096bf002de9303ca18025
SHA1

4d7d19cf78b3fca584922255b5d338e7571cb645
SHA256

96d9f48df470a6e786d5b2c6126803d556a304bf8a3facd5b12911df63beca1a
SHA512

a6efa38a10ae434f4eae3f89f70247d4c9e082f81d4bf807811731b7d48a52eaf169826aef2b7ea3e272f984d3f4f776eeb59814d07746ab77048cd2e480f0b8
SSDEEP

24576:++izsl9EabtAPPZZZRDjunbfAnZdZvdZd:hHw

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  fd70152582f096bf002de9303ca18025_JaffaCakes118
- Size
  
  980KB
- MD5
  
  fd70152582f096bf002de9303ca18025
- SHA1
  
  4d7d19cf78b3fca584922255b5d338e7571cb645
- SHA256
  
  96d9f48df470a6e786d5b2c6126803d556a304bf8a3facd5b12911df63beca1a
- SHA512
  
  a6efa38a10ae434f4eae3f89f70247d4c9e082f81d4bf807811731b7d48a52eaf169826aef2b7ea3e272f984d3f4f776eeb59814d07746ab77048cd2e480f0b8
- SSDEEP
  
  24576:++izsl9EabtAPPZZZRDjunbfAnZdZvdZd:hHw
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2