3a5516e7f068c31c561d450de9a5e5bcdd446f80c1432762cc95b25f3778cb43 | Triage

Sharing

General

Target

6952219e7782840087604da2714345e8_JaffaCakes118
Size

184KB
Sample

240523-b3mazshb92
MD5

6952219e7782840087604da2714345e8
SHA1

01684e95acc6fdc863d7cd9728d1a38054dc7b6f
SHA256

3a5516e7f068c31c561d450de9a5e5bcdd446f80c1432762cc95b25f3778cb43
SHA512

b4979d2fa9089d513ebac4aa4438ba480fda5e7ff79dd0ea2e4a51b01fecc49c01a38ce7eee483e312312ecbb621461383cba7d24bea95927848be78fe4c814a
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3Y:/7BSH8zUB+nGESaaRvoB7FJNndnh

Score

8^/10

execution

Malware Config

Targets

- Target
  
  6952219e7782840087604da2714345e8_JaffaCakes118
- Size
  
  184KB
- MD5
  
  6952219e7782840087604da2714345e8
- SHA1
  
  01684e95acc6fdc863d7cd9728d1a38054dc7b6f
- SHA256
  
  3a5516e7f068c31c561d450de9a5e5bcdd446f80c1432762cc95b25f3778cb43
- SHA512
  
  b4979d2fa9089d513ebac4aa4438ba480fda5e7ff79dd0ea2e4a51b01fecc49c01a38ce7eee483e312312ecbb621461383cba7d24bea95927848be78fe4c814a
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3Y:/7BSH8zUB+nGESaaRvoB7FJNndnh
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2