a979083cef3027dc433692c7f52e943b6bcc2842acc0bab091b618fc404b1b44 | Triage

Sharing

General

Target

6c602db62d206aa13e39dcffee67d404_JaffaCakes118
Size

184KB
Sample

240523-1qg8yaab3z
MD5

6c602db62d206aa13e39dcffee67d404
SHA1

7442eea98042ca510c163db659238277982f698e
SHA256

a979083cef3027dc433692c7f52e943b6bcc2842acc0bab091b618fc404b1b44
SHA512

7f1df756497bd9923a617593736b43adf012b38476ca8628bacbcc4023724612bf61804b4d45e9a9c7bd6485a8c272a9a47bd09e49cefa8057def6ab2929feb7
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3I:/7BSH8zUB+nGESaaRvoB7FJNndn1

Score

8^/10

execution

Malware Config

Targets

- Target
  
  6c602db62d206aa13e39dcffee67d404_JaffaCakes118
- Size
  
  184KB
- MD5
  
  6c602db62d206aa13e39dcffee67d404
- SHA1
  
  7442eea98042ca510c163db659238277982f698e
- SHA256
  
  a979083cef3027dc433692c7f52e943b6bcc2842acc0bab091b618fc404b1b44
- SHA512
  
  7f1df756497bd9923a617593736b43adf012b38476ca8628bacbcc4023724612bf61804b4d45e9a9c7bd6485a8c272a9a47bd09e49cefa8057def6ab2929feb7
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3I:/7BSH8zUB+nGESaaRvoB7FJNndn1
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2