General
- Target jaffacakes118_cd0cae9d7733ce1b92159e5064415d5bfdb6f87bc63f09942102d0a021ae8e5b.bin
- Size 425KB
- Sample260930-pt1c5sfe67
- SHA256 cd0cae9d7733ce1b92159e5064415d5bfdb6f87bc63f09942102d0a021ae8e5b
Score
7/10
Malware Config
Targets
-
- Target jaffacakes118_cd0cae9d7733ce1b92159e5064415d5bfdb6f87bc63f09942102d0a021ae8e5b.bin
- Size 425KB
- SHA256 cd0cae9d7733ce1b92159e5064415d5bfdb6f87bc63f09942102d0a021ae8e5b
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Process Discovery
1Query Registry
3Remote System Discovery
1System Information Discovery
4System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
2Internet Connection Discovery
1System Time Discovery
1