6e9a01d6abf9069d6651f52676aad768f264114b0b4ee13dc3d000c04ecb0106 | Triage

Sharing

General

Target

29f42bd0d1ef2ae47efcc08659cfda5e_JaffaCakes118
Size

240KB
Sample

241009-dy8pjazgjr
MD5

29f42bd0d1ef2ae47efcc08659cfda5e
SHA1

ba57d3d6530c5272720b226d7091866bebbaec0d
SHA256

6e9a01d6abf9069d6651f52676aad768f264114b0b4ee13dc3d000c04ecb0106
SHA512

d589429c0d525911715bc67fbece9944fea00f39fd530e02bb104e20eb956a57cd7800b79dc71a6c1340bed19eeaa0a49150ae0b37f3eeccff200c2b3f553c3d
SSDEEP

6144:AxtkWYl7xvZrVPV0f7Ha65x30QyhXaLD3B:mbYD/S7F52RKXR

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  29f42bd0d1ef2ae47efcc08659cfda5e_JaffaCakes118
- Size
  
  240KB
- MD5
  
  29f42bd0d1ef2ae47efcc08659cfda5e
- SHA1
  
  ba57d3d6530c5272720b226d7091866bebbaec0d
- SHA256
  
  6e9a01d6abf9069d6651f52676aad768f264114b0b4ee13dc3d000c04ecb0106
- SHA512
  
  d589429c0d525911715bc67fbece9944fea00f39fd530e02bb104e20eb956a57cd7800b79dc71a6c1340bed19eeaa0a49150ae0b37f3eeccff200c2b3f553c3d
- SSDEEP
  
  6144:AxtkWYl7xvZrVPV0f7Ha65x30QyhXaLD3B:mbYD/S7F52RKXR
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2