a68ddc2a91fef2b44aa3d2b4430b4ed334ba1ab440e7b29d2b0da305597792fd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62921429943e8d2f7c04d682b36e3a1b_JaffaCakes118
Size

184KB
Sample

240521-jsq57adg2z
MD5

62921429943e8d2f7c04d682b36e3a1b
SHA1

d7d59768e2246133acd6d09aa0f37d4d17037383
SHA256

a68ddc2a91fef2b44aa3d2b4430b4ed334ba1ab440e7b29d2b0da305597792fd
SHA512

018c41934d288e20dbf0db34f0f24837e92e8b8793c2b435f89384ba0f125efc89227cc8b5636107ce4cc38e6980d4c46bde491cd840bc5772f292d0cee5d1c9
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3c:/7BSH8zUB+nGESaaRvoB7FJNndn1

Score

8^/10

execution

Malware Config

Targets

- Target
  
  62921429943e8d2f7c04d682b36e3a1b_JaffaCakes118
- Size
  
  184KB
- MD5
  
  62921429943e8d2f7c04d682b36e3a1b
- SHA1
  
  d7d59768e2246133acd6d09aa0f37d4d17037383
- SHA256
  
  a68ddc2a91fef2b44aa3d2b4430b4ed334ba1ab440e7b29d2b0da305597792fd
- SHA512
  
  018c41934d288e20dbf0db34f0f24837e92e8b8793c2b435f89384ba0f125efc89227cc8b5636107ce4cc38e6980d4c46bde491cd840bc5772f292d0cee5d1c9
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3c:/7BSH8zUB+nGESaaRvoB7FJNndn1
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2