9a2d525ed1167fb6dec47ce9983208b1252711aff7678b9829b45640125b37a8 | Triage

Sharing

General

Target

06329962dcb99f525a103c8056a60435_JaffaCakes118
Size

125KB
Sample

241001-rsq47ayanb
MD5

06329962dcb99f525a103c8056a60435
SHA1

c4c7c6a776e95828f7fbad051eaf63a9a265675d
SHA256

9a2d525ed1167fb6dec47ce9983208b1252711aff7678b9829b45640125b37a8
SHA512

02c460058bad85108f8d130c3c32531725f7ae4b950f7caa85a2865c616f4c18aedda814ca80ab98eb02cc9b05fe2921a3ce4dd197dde73cd35ea3cc78a5fbc3
SSDEEP

3072:FwxVMhOC/dTDbq91+mno3t4QZQ34NLCh/MyqlJk3:FTfFDbRnOT4N+yJA

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  06329962dcb99f525a103c8056a60435_JaffaCakes118
- Size
  
  125KB
- MD5
  
  06329962dcb99f525a103c8056a60435
- SHA1
  
  c4c7c6a776e95828f7fbad051eaf63a9a265675d
- SHA256
  
  9a2d525ed1167fb6dec47ce9983208b1252711aff7678b9829b45640125b37a8
- SHA512
  
  02c460058bad85108f8d130c3c32531725f7ae4b950f7caa85a2865c616f4c18aedda814ca80ab98eb02cc9b05fe2921a3ce4dd197dde73cd35ea3cc78a5fbc3
- SSDEEP
  
  3072:FwxVMhOC/dTDbq91+mno3t4QZQ34NLCh/MyqlJk3:FTfFDbRnOT4N+yJA
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2