27aa9b78132537f8795e4c367091189767c8bde64b863645f7e9e4935b3f5f42 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48f5ec6e5ae8b9ed9f3f7d4641f35d3f_JaffaCakes118
Size

184KB
Sample

240516-bzpa6sef55
MD5

48f5ec6e5ae8b9ed9f3f7d4641f35d3f
SHA1

64861d65a81aa674a529c11db024b14fabeadb18
SHA256

27aa9b78132537f8795e4c367091189767c8bde64b863645f7e9e4935b3f5f42
SHA512

7bfa486098ebe630de2228ce9ab62714012f0ead400c8654336c21b1b5d7d3002a300733ab62b93414f900c47088f6e78dd0037c6d0c0f20941f18da2a3fd8f6
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3M:/7BSH8zUB+nGESaaRvoB7FJNndnt

Score

8^/10

execution

Malware Config

Targets

- Target
  
  48f5ec6e5ae8b9ed9f3f7d4641f35d3f_JaffaCakes118
- Size
  
  184KB
- MD5
  
  48f5ec6e5ae8b9ed9f3f7d4641f35d3f
- SHA1
  
  64861d65a81aa674a529c11db024b14fabeadb18
- SHA256
  
  27aa9b78132537f8795e4c367091189767c8bde64b863645f7e9e4935b3f5f42
- SHA512
  
  7bfa486098ebe630de2228ce9ab62714012f0ead400c8654336c21b1b5d7d3002a300733ab62b93414f900c47088f6e78dd0037c6d0c0f20941f18da2a3fd8f6
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3M:/7BSH8zUB+nGESaaRvoB7FJNndnt
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2