e3ce759f0815a884497820f52ef52277d1d9777f2b135beb7b8f72bc07ab6661 | Triage

Sharing

General

Target

9eeb81277035ed97bbbafdadcc306078_JaffaCakes118
Size

23KB
Sample

241126-ba5xmaslgq
MD5

9eeb81277035ed97bbbafdadcc306078
SHA1

e73fcf8fa089d8f4e731658519e36a33c15514c1
SHA256

e3ce759f0815a884497820f52ef52277d1d9777f2b135beb7b8f72bc07ab6661
SHA512

6493771e0c9f8ede2764439e91a06df083c72dbfd821733197d57911c5fcd2a5b86c0a49096450d8879f567e64d26f52d1436df6b70c3559f006f0466227604b
SSDEEP

384:soGKlLMVT4nGBQtb/Om7bPeIVli0Xr6YDFl2JC6A8nifFhEVU6:so6VT4GBk/OcB6Yl6A8nifFOV

Score

7^/10

defense_evasion discovery

Malware Config

Targets

- Target
  
  9eeb81277035ed97bbbafdadcc306078_JaffaCakes118
- Size
  
  23KB
- MD5
  
  9eeb81277035ed97bbbafdadcc306078
- SHA1
  
  e73fcf8fa089d8f4e731658519e36a33c15514c1
- SHA256
  
  e3ce759f0815a884497820f52ef52277d1d9777f2b135beb7b8f72bc07ab6661
- SHA512
  
  6493771e0c9f8ede2764439e91a06df083c72dbfd821733197d57911c5fcd2a5b86c0a49096450d8879f567e64d26f52d1436df6b70c3559f006f0466227604b
- SSDEEP
  
  384:soGKlLMVT4nGBQtb/Om7bPeIVli0Xr6YDFl2JC6A8nifFhEVU6:so6VT4GBk/OcB6Yl6A8nifFOV
Score

7^/10

discovery defense_evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

File Deletion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

defense_evasiondiscovery