d3cb5d726b806930ce867d005555581f189a78f26faad9f1b2dbecf1b7d632ae | Triage

Sharing

General

Target

2c41c5a3fad7834af2ff6a5db8bb04c3_JaffaCakes118
Size

75KB
Sample

241009-gxh92axarm
MD5

2c41c5a3fad7834af2ff6a5db8bb04c3
SHA1

b6c5989f0d4b9e8cd165aeb92d6e6a9dff2ef826
SHA256

d3cb5d726b806930ce867d005555581f189a78f26faad9f1b2dbecf1b7d632ae
SHA512

e8f9861ca8631d1d1198926cf9f075a0bbfa976e4a97670771ff0cd272a68e17790acb97aaf1259bbb1f2ac430ec124e0c036156e51c9a92aaa065d108fba5d4
SSDEEP

1536:QJJI5Vorz//oTc6AO+NzmRt1cVOXdbzPtxfLWDP:QJSVoev/1cVWlFEb

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2c41c5a3fad7834af2ff6a5db8bb04c3_JaffaCakes118
- Size
  
  75KB
- MD5
  
  2c41c5a3fad7834af2ff6a5db8bb04c3
- SHA1
  
  b6c5989f0d4b9e8cd165aeb92d6e6a9dff2ef826
- SHA256
  
  d3cb5d726b806930ce867d005555581f189a78f26faad9f1b2dbecf1b7d632ae
- SHA512
  
  e8f9861ca8631d1d1198926cf9f075a0bbfa976e4a97670771ff0cd272a68e17790acb97aaf1259bbb1f2ac430ec124e0c036156e51c9a92aaa065d108fba5d4
- SSDEEP
  
  1536:QJJI5Vorz//oTc6AO+NzmRt1cVOXdbzPtxfLWDP:QJSVoev/1cVWlFEb
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2