e37996c6187a4dfb8bc5106e7224df519e5bcc9ff9d8df0a45ca7cad83aeee53 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

028e2c31fe1a2c2c9617307481d954bf_JaffaCakes118
Size

68KB
Sample

240930-wdymyaxgll
MD5

028e2c31fe1a2c2c9617307481d954bf
SHA1

afc359400b50742278002e6aecd3b78ded047d2c
SHA256

e37996c6187a4dfb8bc5106e7224df519e5bcc9ff9d8df0a45ca7cad83aeee53
SHA512

45a1792131f64a8f056079abaaab7e0c9cbd6ea4c127155a2741c837f2bf85580c44e517205d411e591597d4196f40c8361b542a29c6e04653940c98a6afb6ff
SSDEEP

1536:KBBGgyj8QvFxHSNOJpNQRFqNQdvciyw6:kBGgeEOZAEw6

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  028e2c31fe1a2c2c9617307481d954bf_JaffaCakes118
- Size
  
  68KB
- MD5
  
  028e2c31fe1a2c2c9617307481d954bf
- SHA1
  
  afc359400b50742278002e6aecd3b78ded047d2c
- SHA256
  
  e37996c6187a4dfb8bc5106e7224df519e5bcc9ff9d8df0a45ca7cad83aeee53
- SHA512
  
  45a1792131f64a8f056079abaaab7e0c9cbd6ea4c127155a2741c837f2bf85580c44e517205d411e591597d4196f40c8361b542a29c6e04653940c98a6afb6ff
- SSDEEP
  
  1536:KBBGgyj8QvFxHSNOJpNQRFqNQdvciyw6:kBGgeEOZAEw6
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Enumerates processes with tasklist
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2