7aed1fe262964760b85442dbea38c34fb89f69706742846d0501a38e3ec312f6 | Triage

Sharing

General

Target

63dba4f0690c9fe20eb93b35ca7ec5de_JaffaCakes118
Size

11KB
Sample

240521-tbdtmsba23
MD5

63dba4f0690c9fe20eb93b35ca7ec5de
SHA1

83782b029954ebf27c75d004d936f3a3d602e73f
SHA256

7aed1fe262964760b85442dbea38c34fb89f69706742846d0501a38e3ec312f6
SHA512

8e8712c09426271600f16ccc2126f9f3104174db664ef71981a69dc85fc08cbc0b82a8c9c81bd16b92d8a4cc17047b4c55b890e2853a7c78f919e2a07f138fa8
SSDEEP

192:XE8PSEt4IlcZVi/mHPMQwyTE9Zqw7d+Qgfw6rVhYC2HPAadtDFa9wUbBfLR+engz:X/PS+VluLjwyTyqSIQB65hr2H4adNw9g

Score

8^/10

execution

Malware Config

Targets

- Target
  
  LLC_257440684314US_Apr_28_2019.js
- Size
  
  38KB
- MD5
  
  2c255638e9f931532dc429698698fa7b
- SHA1
  
  8fbdcbc759c6d373e591bf4d03639e88487b29ae
- SHA256
  
  c2c75ef2cf7461733ccfcf2695ca9c2f3609ba27620ca160362ff85cd7d61559
- SHA512
  
  0747f55d2494e9ae0811b435b3101ed41b66675e42cbfd1960f07e2dccb03626f815f298d0ccbb2c3b4aaff803f7ae511ac789b9f07caa669f716294d5245d66
- SSDEEP
  
  768:vkPYKAKorzXDGDSvSEDmP+wZX2e2W6yz86AnWKWpkVANk6JxN:vkPYKAKorzXDGDSv2+wZG6wNgNDv
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2