95646abda67b4ffa3e175cf767fc91245b7c40a07564afa1d8d255fb1dd69656 | Triage

Sharing

General

Target

2cd5121eb08d4bb5dc4b9974d2c24de1_JaffaCakes118
Size

184KB
Sample

240510-cl2j1scg8z
MD5

2cd5121eb08d4bb5dc4b9974d2c24de1
SHA1

6813a07bf84ea680d0fbf269fcff0ecf572e1b5c
SHA256

95646abda67b4ffa3e175cf767fc91245b7c40a07564afa1d8d255fb1dd69656
SHA512

4858a4f9551029761478350f997b434e75dc5b9a7952dba3c6afb76d7d24cefa2f9c754dedbefa4dfb13dee6589b38c947677ba361fb46fa9c950728682ebc4f
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3u:/7BSH8zUB+nGESaaRvoB7FJNndnL

Score

8^/10

execution

Malware Config

Targets

- Target
  
  2cd5121eb08d4bb5dc4b9974d2c24de1_JaffaCakes118
- Size
  
  184KB
- MD5
  
  2cd5121eb08d4bb5dc4b9974d2c24de1
- SHA1
  
  6813a07bf84ea680d0fbf269fcff0ecf572e1b5c
- SHA256
  
  95646abda67b4ffa3e175cf767fc91245b7c40a07564afa1d8d255fb1dd69656
- SHA512
  
  4858a4f9551029761478350f997b434e75dc5b9a7952dba3c6afb76d7d24cefa2f9c754dedbefa4dfb13dee6589b38c947677ba361fb46fa9c950728682ebc4f
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3u:/7BSH8zUB+nGESaaRvoB7FJNndnL
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2