7521672451a0885415f8e1649185a4e44636fb6c018a07ec77ac296a4c0c6242 | Triage

Sharing

General

Target

1562354bdd40dd3095c32c9277006657_JaffaCakes118
Size

6KB
Sample

240505-byjz3aad81
MD5

1562354bdd40dd3095c32c9277006657
SHA1

983628f97494ccaebe96ecb5d08867c950040913
SHA256

7521672451a0885415f8e1649185a4e44636fb6c018a07ec77ac296a4c0c6242
SHA512

619c48711576c4fa141e085c2cf078e5f92e8734f76f18654e4b9cbfccc1b1f9720aa0b1d9aadf470532e3dedeaac94f165db9a838d02e1c7de6aa58bbad12e5
SSDEEP

192:rj3+tfh/I0f0GaDeFl0xhSA8q/WzkVH6PHVkE:r6tfhBOiP0LTizkJ6NkE

Score

8^/10

execution

Malware Config

Targets

- Target
  
  T-91044482-04242019.js
- Size
  
  26KB
- MD5
  
  dc325decfb873739d6c09055b09fc043
- SHA1
  
  50dfe46b30f8dee35bc6f1285138e3dd631165ee
- SHA256
  
  f9a3d8d2568059bff0da6d27fe8d474fa8dc1c0f97c24433f2fd9caed3594b0f
- SHA512
  
  3a468cb4ad8ebc69cd53891868949856bd5877b72191bcc500b097bd2e090ee326ca8ef82b6f0d69f9296ab79091c57788d09f905f9b8eefd87a34af3aad341f
- SSDEEP
  
  768:/mpSpUgP3uPJSNRAyMLNhRKl0TSGkFDbLKXyAXStfwzrR2nr2IT1JRT2xML1i7GS:OpSpUgP3kSNJMLAqqo
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2