dbbbe2de2673b6803c9d519be1c441175eb025feaf1792ee450f4e9fbffbe2c2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2413725f2270df3652674c8d45fbac89_JaffaCakes118
Size

2KB
Sample

240508-kp2yyscb9y
MD5

2413725f2270df3652674c8d45fbac89
SHA1

160da697c77bdb638b42afae6f2b84ad603bb72d
SHA256

dbbbe2de2673b6803c9d519be1c441175eb025feaf1792ee450f4e9fbffbe2c2
SHA512

f908c4a00311347888143b587f9c10a72099877ff71314453042c7adece12918c9516504e8c45744a4c3ed6bd134074518f439f3e391525d206886af46be7e96

Score

8^/10

execution

Malware Config

Targets

- Target
  
  2019_03_ACC0635411427088___5057360534362.js
- Size
  
  5KB
- MD5
  
  ce4094644909bb5af2425a37492572c4
- SHA1
  
  e49b29ef0870d3b47da3b8c5cf633f5d939e631c
- SHA256
  
  ea83f37ea40704a8cc7d9c1b63fd0b3bf7d15d9bb17c13dccfb91d64e48f33b8
- SHA512
  
  10606ee66158ad3adca3451d9f5429bf36e00d2f258d2de5474bf36bc911d1de7c7334a1af0f08aa8114dd775e936bb443580590e0c1b2012ada014fcc69d000
- SSDEEP
  
  96:k/zB/Ssp3FcKlNmAEbBZ3a/WKFkDYJ6xTXFyn3+LpOlMmBrE2lKlIav7b/VqfqwJ:WKs7/mAEbBZYWKFkDty3gpqlE2lKlIaW
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2