2f8214b2f88c326893c62dab2d11ba5b538519a5560909ff863a02e45a943b96 | Triage

Sharing

General

Target

6714eb244ba1b22fbe3c5b4babb0f68e_JaffaCakes118
Size

2KB
Sample

240522-nfx57acg72
MD5

6714eb244ba1b22fbe3c5b4babb0f68e
SHA1

37657791b6d6ed670ba6bfe70132f162795085a9
SHA256

2f8214b2f88c326893c62dab2d11ba5b538519a5560909ff863a02e45a943b96
SHA512

0b09d37f451469b8f11802233e79aef8a2e7293423425a0af0892b62208a7a4fe94eb8b2a4bbca1c3e2c9cc280c83ddcdf17b96f6fb8297c3e70946495fe945a

Score

8^/10

execution

Malware Config

Targets

- Target
  
  Visualizar_Fatura-RF0082213s.js
- Size
  
  4KB
- MD5
  
  14c9a81bfeb048af0e436558c0d53162
- SHA1
  
  110026a9a9864c72d216a5cbdfce9e33dfd37977
- SHA256
  
  edeb1e1a8714a77a6947a6684e222853ca7b6d28170770fea6543c400d20dc7a
- SHA512
  
  cb621e0a5ecebd9b21b1e8c9d38f91fdf47d09b6353fedfa531a721951924eb377de3ad9495162e6e99c131d4a674b1ab78c3741ff18095293e0b81bd09e41a4
- SSDEEP
  
  96:3q1oMkcOehkDqvS+5fbU2hVWnfJxHlxT/qfmxyAsL/Vo5IwPKAIMKBCJrf:MzXvSehh0nfJNlxjqfmYHL/5AIMKBcj
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2