b714cb0cbd8ba64ce94c335fd5b348adeaf83f8454ffe9abe1827d951936c545 | Triage

Sharing

General

Target

41e0aea3d6e682a65154c837b838682a_JaffaCakes118
Size

109KB
Sample

241013-y3anhs1bln
MD5

41e0aea3d6e682a65154c837b838682a
SHA1

d12cc9eaf1207bc1ff152d47857763c2920b0767
SHA256

b714cb0cbd8ba64ce94c335fd5b348adeaf83f8454ffe9abe1827d951936c545
SHA512

c3577d0ce2183b6c1fdd5bdd8d07677b063cc5e5865dfc0dd44e7a18116db3bcce839599853cef412448dc7cd8f4871ad4ee2bbf9648556502ed61db2ce75590
SSDEEP

3072:avo8VsYSrQ7F6wbiPHUOFp3ZnskGPIjj/yFIb:BQRi/UO73ZnTGPIjjZ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  41e0aea3d6e682a65154c837b838682a_JaffaCakes118
- Size
  
  109KB
- MD5
  
  41e0aea3d6e682a65154c837b838682a
- SHA1
  
  d12cc9eaf1207bc1ff152d47857763c2920b0767
- SHA256
  
  b714cb0cbd8ba64ce94c335fd5b348adeaf83f8454ffe9abe1827d951936c545
- SHA512
  
  c3577d0ce2183b6c1fdd5bdd8d07677b063cc5e5865dfc0dd44e7a18116db3bcce839599853cef412448dc7cd8f4871ad4ee2bbf9648556502ed61db2ce75590
- SSDEEP
  
  3072:avo8VsYSrQ7F6wbiPHUOFp3ZnskGPIjj/yFIb:BQRi/UO73ZnTGPIjjZ
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2