b42dfb8edbed135a21427c868a0154aea5b04ae8cd7077fe078a297790ecbc19 | Triage

Sharing

General

Target

7541be9044f3a1d7ab258bb36f857a2e_JaffaCakes118
Size

184KB
Sample

240526-m3cmbsfh2y
MD5

7541be9044f3a1d7ab258bb36f857a2e
SHA1

25b38a97fd748ef26874fa390f98597013ef102d
SHA256

b42dfb8edbed135a21427c868a0154aea5b04ae8cd7077fe078a297790ecbc19
SHA512

40343f0d547e57b4d26f776fd3a1bdf6b791f0ba0e26355968a4c899926cf89e320bc5dbcf72d88ccef5fa145beb099d6a9e4d17320c80ccfbd61c69ea4fbcda
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3+i:/7BSH8zUB+nGESaaRvoB7FJNndn2

Score

8^/10

execution

Malware Config

Targets

- Target
  
  7541be9044f3a1d7ab258bb36f857a2e_JaffaCakes118
- Size
  
  184KB
- MD5
  
  7541be9044f3a1d7ab258bb36f857a2e
- SHA1
  
  25b38a97fd748ef26874fa390f98597013ef102d
- SHA256
  
  b42dfb8edbed135a21427c868a0154aea5b04ae8cd7077fe078a297790ecbc19
- SHA512
  
  40343f0d547e57b4d26f776fd3a1bdf6b791f0ba0e26355968a4c899926cf89e320bc5dbcf72d88ccef5fa145beb099d6a9e4d17320c80ccfbd61c69ea4fbcda
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3+i:/7BSH8zUB+nGESaaRvoB7FJNndn2
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2