ac254f292f6408f3966537fb4060e53a8c0170e9c1189efba4ca52656208cb64 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11a3a22578b1f24c6876f305f771b3a9_JaffaCakes118
Size

120KB
Sample

241004-dyx8sswbqg
MD5

11a3a22578b1f24c6876f305f771b3a9
SHA1

29ed636b6c95f820c61e411daa4e47ba4c0cbc90
SHA256

ac254f292f6408f3966537fb4060e53a8c0170e9c1189efba4ca52656208cb64
SHA512

30a847d7f1dcd1506e69cc77b056167522497e751e03eb51dc4a4f2c68b8a9e2079d98a1a834094730b40c7c78cc5eb3281b19715bf230a5136fc2d91c732514
SSDEEP

1536:Y2hA2mAK0nh2qeCk9EHJPVsXURyDvMO1Ra+3ZucQUBaYoEqaaoMQj5/9X9DMeLUX:YsZe9iw8yfk+3ZucQUB/p9KVpT

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  11a3a22578b1f24c6876f305f771b3a9_JaffaCakes118
- Size
  
  120KB
- MD5
  
  11a3a22578b1f24c6876f305f771b3a9
- SHA1
  
  29ed636b6c95f820c61e411daa4e47ba4c0cbc90
- SHA256
  
  ac254f292f6408f3966537fb4060e53a8c0170e9c1189efba4ca52656208cb64
- SHA512
  
  30a847d7f1dcd1506e69cc77b056167522497e751e03eb51dc4a4f2c68b8a9e2079d98a1a834094730b40c7c78cc5eb3281b19715bf230a5136fc2d91c732514
- SSDEEP
  
  1536:Y2hA2mAK0nh2qeCk9EHJPVsXURyDvMO1Ra+3ZucQUBaYoEqaaoMQj5/9X9DMeLUX:YsZe9iw8yfk+3ZucQUB/p9KVpT
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Enumerates processes with tasklist
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2