2db79907f43c2075e86eca97e6580de3023013bed051d6086afa57d1fb3ae31f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a77e544908be7b297168c7da087fb67_JaffaCakes118
Size

2.2MB
Sample

240523-lbfz1abg8v
MD5

6a77e544908be7b297168c7da087fb67
SHA1

73c86d4f8cef5560adbdb67affea295bf9c59fa8
SHA256

2db79907f43c2075e86eca97e6580de3023013bed051d6086afa57d1fb3ae31f
SHA512

71f00e22b2eb95e106279d88ab49192afe9ab1fd40ade636c850518b3e5084a39ff2a1012b6d1f634c404febdb7f2df8d004467605c3f91a4233477f75f6b785
SSDEEP

49152:E5+hFYj8F9jWOHVuLS3j3DxYmSAOUrw7pbOo3K3cyYF8gEkZ:E5aFYOjWOHT3XxsiqtSMpvZ

Score

8^/10

execution

Malware Config

Targets

- Target
  
  6a77e544908be7b297168c7da087fb67_JaffaCakes118
- Size
  
  2.2MB
- MD5
  
  6a77e544908be7b297168c7da087fb67
- SHA1
  
  73c86d4f8cef5560adbdb67affea295bf9c59fa8
- SHA256
  
  2db79907f43c2075e86eca97e6580de3023013bed051d6086afa57d1fb3ae31f
- SHA512
  
  71f00e22b2eb95e106279d88ab49192afe9ab1fd40ade636c850518b3e5084a39ff2a1012b6d1f634c404febdb7f2df8d004467605c3f91a4233477f75f6b785
- SSDEEP
  
  49152:E5+hFYj8F9jWOHVuLS3j3DxYmSAOUrw7pbOo3K3cyYF8gEkZ:E5aFYOjWOHT3XxsiqtSMpvZ
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2