1e2ece766c4949e794422ff3b7b966d702f1008dc579ad0be6613b8fac173221 | Triage

Sharing

General

Target

46427712e9db62054750f563932f2797_JaffaCakes118
Size

7KB
Sample

241015-g7b9gatdqm
MD5

46427712e9db62054750f563932f2797
SHA1

62fb1d866dd7d41a852110843c76883bfb0a201d
SHA256

1e2ece766c4949e794422ff3b7b966d702f1008dc579ad0be6613b8fac173221
SHA512

7587e875b8b82931f91247eb66b6c86c3536ec8d69b4a0960ba955c8d30cde53afcf65a7fa7d7583c28e7f617b48f15eac3c22399c065eda6689442ddd42a760
SSDEEP

96:pwf5Mm08sf7D9/2GPzLQ/p55peKdcd0hSl+H/tLrd28d9dM3uWaDLeBomjFCz:G2mrsfN/JrLQhvpxlflrsK6aDLI/FCz

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  46427712e9db62054750f563932f2797_JaffaCakes118
- Size
  
  7KB
- MD5
  
  46427712e9db62054750f563932f2797
- SHA1
  
  62fb1d866dd7d41a852110843c76883bfb0a201d
- SHA256
  
  1e2ece766c4949e794422ff3b7b966d702f1008dc579ad0be6613b8fac173221
- SHA512
  
  7587e875b8b82931f91247eb66b6c86c3536ec8d69b4a0960ba955c8d30cde53afcf65a7fa7d7583c28e7f617b48f15eac3c22399c065eda6689442ddd42a760
- SSDEEP
  
  96:pwf5Mm08sf7D9/2GPzLQ/p55peKdcd0hSl+H/tLrd28d9dM3uWaDLeBomjFCz:G2mrsfN/JrLQhvpxlflrsK6aDLI/FCz
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Unexpected DNS network traffic destination
  Network traffic to other servers than the configured DNS servers was detected on the DNS port.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2