b27230c5b6f2f6a557fe12c52356cec5fe920f112bbee95c4cc18ca463233397 | Triage

Sharing

General

Target

348e767c62354c5821887bc193958a85_JaffaCakes118
Size

2KB
Sample

240511-phmmxaaf26
MD5

348e767c62354c5821887bc193958a85
SHA1

4bcc6f83552502440549a503800c6508ccf5223c
SHA256

b27230c5b6f2f6a557fe12c52356cec5fe920f112bbee95c4cc18ca463233397
SHA512

0811e69d41ad743dad6b94b91b19353ec4bac1b9491f97a71c7db64f2326723fe978e9c7bb937f7750a1f89c6fac18b34cf0d9a2588c3710d84c32dfc1c867b6

Score

8^/10

execution

Malware Config

Targets

- Target
  
  colegio_abogados_descargar.pdf.js
- Size
  
  6KB
- MD5
  
  a133a8c984734019b1442707448aa9c1
- SHA1
  
  1273dea41635efa1403226b419445d210af0476a
- SHA256
  
  78ddbe9972f32e631bee7b7b3d25879abc1aca74f69f445f482d76219c8c87c3
- SHA512
  
  90ffc1662014c504f78ee17763ac09c39762e6548e9760a113b12ebde090d5fe48cb1839192897690aba82e9efd4c5e4478c58332ec493c36346f73436e28723
- SSDEEP
  
  96:ihQ1dpdfs2NFJvmfbUBhJWnBxHlI/PVyyAs3/wAS5qXu7O765vM24JneeTjusAqX:ikdpVs8vmChwnBNlmPV9H3/Em7JuC9
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2