9054054d38316e7d0026a71bbb55fdf023d2616deed4997b32900178b056f4f6 | Triage

Sharing

General

Target

1f08dba1c294a753b71f99ad678916c5_JaffaCakes118
Size

184KB
Sample

240507-b8rsnaga32
MD5

1f08dba1c294a753b71f99ad678916c5
SHA1

feb848a9f2d0259274d4b585def9437ac5972313
SHA256

9054054d38316e7d0026a71bbb55fdf023d2616deed4997b32900178b056f4f6
SHA512

ba6044796e764f1298978b08269616152ca6d1051a463e31fe51eaba47544a0c841786c930d149c6b06dfed1a9c80c45cf6e74a8f2ca85fbbe7dcad2745d3d42
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3C:/7BSH8zUB+nGESaaRvoB7FJNndnb

Score

8^/10

execution

Malware Config

Targets

- Target
  
  1f08dba1c294a753b71f99ad678916c5_JaffaCakes118
- Size
  
  184KB
- MD5
  
  1f08dba1c294a753b71f99ad678916c5
- SHA1
  
  feb848a9f2d0259274d4b585def9437ac5972313
- SHA256
  
  9054054d38316e7d0026a71bbb55fdf023d2616deed4997b32900178b056f4f6
- SHA512
  
  ba6044796e764f1298978b08269616152ca6d1051a463e31fe51eaba47544a0c841786c930d149c6b06dfed1a9c80c45cf6e74a8f2ca85fbbe7dcad2745d3d42
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3C:/7BSH8zUB+nGESaaRvoB7FJNndnb
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2