e61a0713dc8d6ac41d4d080ca7a53bbe856823c682b433ecd93e90c453498ba5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b82c962180427050c0ecc6e0ad760f4_JaffaCakes118
Size

2KB
Sample

240512-w7glhsdd62
MD5

3b82c962180427050c0ecc6e0ad760f4
SHA1

4b778bb136fdaa0d03c93c5fc1d437dc262cb5fb
SHA256

e61a0713dc8d6ac41d4d080ca7a53bbe856823c682b433ecd93e90c453498ba5
SHA512

6dad3fcc4dd8e7ce55dbc7a0b6070c08afb8393561f25fa839ade9d55824b72aab9d9d130b5d4b348180212d2ae1acbc28d74edae15c48e4ea22b09373a7f280

Score

8^/10

execution

Malware Config

Targets

- Target
  
  2019_03_PAY1669757767320945331___9440497375785579.js
- Size
  
  5KB
- MD5
  
  ce4094644909bb5af2425a37492572c4
- SHA1
  
  e49b29ef0870d3b47da3b8c5cf633f5d939e631c
- SHA256
  
  ea83f37ea40704a8cc7d9c1b63fd0b3bf7d15d9bb17c13dccfb91d64e48f33b8
- SHA512
  
  10606ee66158ad3adca3451d9f5429bf36e00d2f258d2de5474bf36bc911d1de7c7334a1af0f08aa8114dd775e936bb443580590e0c1b2012ada014fcc69d000
- SSDEEP
  
  96:k/zB/Ssp3FcKlNmAEbBZ3a/WKFkDYJ6xTXFyn3+LpOlMmBrE2lKlIav7b/VqfqwJ:WKs7/mAEbBZYWKFkDty3gpqlE2lKlIaW
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2