ed2e4e544de2304b9dfc352737b964202706fd5d669c57d6b35eba85cc2cda11 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30fd44f0df5d08a1c21fff70bff456d4_JaffaCakes118
Size

92KB
Sample

241010-vly31awgja
MD5

30fd44f0df5d08a1c21fff70bff456d4
SHA1

0c5fab766212a9dabb05f0a45f19b4cc4a017785
SHA256

ed2e4e544de2304b9dfc352737b964202706fd5d669c57d6b35eba85cc2cda11
SHA512

4d63cb80e500f669957503a7bf48ef66ce8a7880a63686569152e0247120836d43966d69894c9ef640d2daf902ef65e9bd9a320a2aac0c4f6315f2b726ac4284
SSDEEP

768:gtly7VQJBIg9NSqOiNxX+AvivdFrDwh08SaYPDglcfe7A+O2IBlZ8obPvdti8/du:gto7VQDyiNx+FdFrDwzlvAejTq4CTP7

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  30fd44f0df5d08a1c21fff70bff456d4_JaffaCakes118
- Size
  
  92KB
- MD5
  
  30fd44f0df5d08a1c21fff70bff456d4
- SHA1
  
  0c5fab766212a9dabb05f0a45f19b4cc4a017785
- SHA256
  
  ed2e4e544de2304b9dfc352737b964202706fd5d669c57d6b35eba85cc2cda11
- SHA512
  
  4d63cb80e500f669957503a7bf48ef66ce8a7880a63686569152e0247120836d43966d69894c9ef640d2daf902ef65e9bd9a320a2aac0c4f6315f2b726ac4284
- SSDEEP
  
  768:gtly7VQJBIg9NSqOiNxX+AvivdFrDwh08SaYPDglcfe7A+O2IBlZ8obPvdti8/du:gto7VQDyiNx+FdFrDwzlvAejTq4CTP7
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Enumerates processes with tasklist
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2