89bda83f6eafd66a5e2b5428f7655d5b437b52932966661e76bb48b104c8a9ee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00f1921356d18b825fc9e1d5907053ea_JaffaCakes118
Size

191KB
Sample

240930-mx45ds1crj
MD5

00f1921356d18b825fc9e1d5907053ea
SHA1

ad9e8c27b2608d675d284c3ddc585c4228a1bdf9
SHA256

89bda83f6eafd66a5e2b5428f7655d5b437b52932966661e76bb48b104c8a9ee
SHA512

7db174e66666e0d54ced3d4be4ff6ab379b9e3b44403df5e61f8d0c637534c181236ebd7982a65aa3391ead5b028eb7685bc1018908b97ec53b3ecfda8b0ebd0
SSDEEP

3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0dc:HAVySV1eY4k437d+4wkTHdS20

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  00f1921356d18b825fc9e1d5907053ea_JaffaCakes118
- Size
  
  191KB
- MD5
  
  00f1921356d18b825fc9e1d5907053ea
- SHA1
  
  ad9e8c27b2608d675d284c3ddc585c4228a1bdf9
- SHA256
  
  89bda83f6eafd66a5e2b5428f7655d5b437b52932966661e76bb48b104c8a9ee
- SHA512
  
  7db174e66666e0d54ced3d4be4ff6ab379b9e3b44403df5e61f8d0c637534c181236ebd7982a65aa3391ead5b028eb7685bc1018908b97ec53b3ecfda8b0ebd0
- SSDEEP
  
  3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0dc:HAVySV1eY4k437d+4wkTHdS20
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2