6c0b027fba77e10b9861a1b26bba84603cd77bf3059d49f75e723fe99fb9d16b | Triage

Sharing

General

Target

6a6df11b28209dd4ff99e26bb9152d22_JaffaCakes118
Size

184KB
Sample

240523-k131dsbe76
MD5

6a6df11b28209dd4ff99e26bb9152d22
SHA1

43163388eaff6c55708352860e782022aee2cf63
SHA256

6c0b027fba77e10b9861a1b26bba84603cd77bf3059d49f75e723fe99fb9d16b
SHA512

ade201786c08a8083313017c989aa8107e414b00bb2e80ff01a5c033da28e6bad4cd6857ff3d3bac2dc74c0034b4c25bdda321c3b885ec590b91acb27041b238
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3Q:/7BSH8zUB+nGESaaRvoB7FJNndnp

Score

8^/10

execution

Malware Config

Targets

- Target
  
  6a6df11b28209dd4ff99e26bb9152d22_JaffaCakes118
- Size
  
  184KB
- MD5
  
  6a6df11b28209dd4ff99e26bb9152d22
- SHA1
  
  43163388eaff6c55708352860e782022aee2cf63
- SHA256
  
  6c0b027fba77e10b9861a1b26bba84603cd77bf3059d49f75e723fe99fb9d16b
- SHA512
  
  ade201786c08a8083313017c989aa8107e414b00bb2e80ff01a5c033da28e6bad4cd6857ff3d3bac2dc74c0034b4c25bdda321c3b885ec590b91acb27041b238
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3Q:/7BSH8zUB+nGESaaRvoB7FJNndnp
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2