4e22b6b48ebfce7afaed9f68642d169b5310a81313f1a9ef8d0c9f51d12438e7 | Triage

Sharing

General

Target

25eb6c59739b45a7ca034f816aa30d2e_JaffaCakes118
Size

184KB
Sample

240508-vzg2mseh8y
MD5

25eb6c59739b45a7ca034f816aa30d2e
SHA1

7da03ef3a50fee7f263e411427e57353fd673f0a
SHA256

4e22b6b48ebfce7afaed9f68642d169b5310a81313f1a9ef8d0c9f51d12438e7
SHA512

6d4f2e4f6e7db4082b0ac2ac7f7352011537a7fa6823e03e06c67b5fe5c11d35c1939603437a9caec320e1c32aedd3ac17f405105624d76742f394e05838045d
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3c:/7BSH8zUB+nGESaaRvoB7FJNndnx

Score

8^/10

execution

Malware Config

Targets

- Target
  
  25eb6c59739b45a7ca034f816aa30d2e_JaffaCakes118
- Size
  
  184KB
- MD5
  
  25eb6c59739b45a7ca034f816aa30d2e
- SHA1
  
  7da03ef3a50fee7f263e411427e57353fd673f0a
- SHA256
  
  4e22b6b48ebfce7afaed9f68642d169b5310a81313f1a9ef8d0c9f51d12438e7
- SHA512
  
  6d4f2e4f6e7db4082b0ac2ac7f7352011537a7fa6823e03e06c67b5fe5c11d35c1939603437a9caec320e1c32aedd3ac17f405105624d76742f394e05838045d
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3c:/7BSH8zUB+nGESaaRvoB7FJNndnx
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2