50031d6d6b6acb24e1b1fb4af90f27a99f0f4ec71ffaacd797e22eee15e92a53 | Triage

Sharing

General

Target

4967bb09f4f8ebc3a74b47770e894374_JaffaCakes118
Size

184KB
Sample

240516-ezjbpsbg4x
MD5

4967bb09f4f8ebc3a74b47770e894374
SHA1

ec32a8a7ea17f2bdefbd39f06090c8dc9a24b8c6
SHA256

50031d6d6b6acb24e1b1fb4af90f27a99f0f4ec71ffaacd797e22eee15e92a53
SHA512

8191710ba007279e0cc4f88cb22a21f79fc1da8ba882cbe8be3deafe1e98fcb9c39bf86cd34012c46ca91fe2d7307e398d4e698cd3d50381061eb15b619123f5
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3/:/7BSH8zUB+nGESaaRvoB7FJNndni

Score

8^/10

execution

Malware Config

Targets

- Target
  
  4967bb09f4f8ebc3a74b47770e894374_JaffaCakes118
- Size
  
  184KB
- MD5
  
  4967bb09f4f8ebc3a74b47770e894374
- SHA1
  
  ec32a8a7ea17f2bdefbd39f06090c8dc9a24b8c6
- SHA256
  
  50031d6d6b6acb24e1b1fb4af90f27a99f0f4ec71ffaacd797e22eee15e92a53
- SHA512
  
  8191710ba007279e0cc4f88cb22a21f79fc1da8ba882cbe8be3deafe1e98fcb9c39bf86cd34012c46ca91fe2d7307e398d4e698cd3d50381061eb15b619123f5
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3/:/7BSH8zUB+nGESaaRvoB7FJNndni
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2