30674d2af05acc128e29b2c9c09fce3c2fd5f2cf5446a082a2b997a27d8cd4b4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd949a8ffa32d45b0d2eff3338c59dd5_JaffaCakes118
Size

264KB
Sample

240929-ce7gpaycmh
MD5

fd949a8ffa32d45b0d2eff3338c59dd5
SHA1

dd484800b2c51fb37b3781cffb038472824663f8
SHA256

30674d2af05acc128e29b2c9c09fce3c2fd5f2cf5446a082a2b997a27d8cd4b4
SHA512

243ff53a339bc8c2892234bfbc957411c88c816c347d2d661d1f0bd4b3472200e497e6b0cc93acca646b8cba9967c09566c19de5d0cee1cc94e2a3f48edf14eb
SSDEEP

6144:rSDEpUzDEpUd3DcCv+ipcfzOpXquqtlYQAP:rSDEpUzDEpUJArGqbqQAP

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  fd949a8ffa32d45b0d2eff3338c59dd5_JaffaCakes118
- Size
  
  264KB
- MD5
  
  fd949a8ffa32d45b0d2eff3338c59dd5
- SHA1
  
  dd484800b2c51fb37b3781cffb038472824663f8
- SHA256
  
  30674d2af05acc128e29b2c9c09fce3c2fd5f2cf5446a082a2b997a27d8cd4b4
- SHA512
  
  243ff53a339bc8c2892234bfbc957411c88c816c347d2d661d1f0bd4b3472200e497e6b0cc93acca646b8cba9967c09566c19de5d0cee1cc94e2a3f48edf14eb
- SSDEEP
  
  6144:rSDEpUzDEpUd3DcCv+ipcfzOpXquqtlYQAP:rSDEpUzDEpUJArGqbqQAP
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2