General

  • Target

    7d63ecb21196873154080e3722991e1a_JaffaCakes118

  • Size

    11KB

  • Sample

    240528-se9j2sah22

  • MD5

    7d63ecb21196873154080e3722991e1a

  • SHA1

    2bf244e34383d081575949fe13f41c514236bea3

  • SHA256

    c6889e5d6fa50fc0079541958459c072f3dc923840d87a8b8c45a286f67d22b1

  • SHA512

    19f6b027378404e63cc98f55f997df79d34187f7ecca951efc2922eb8451c0664f6fdc8e19d250f36011d2932e07825ed135c6187cbd2c8613246b62e6bcbd49

  • SSDEEP

    192:VE8PSEt4IlcZVi/mHPMQwyTE9Zqw7d+Qgfw6rVhYC2HPAadtDFa9wUbBfLR+engh:V/PS+VluLjwyTyqSIQB65hr2H4adNw9q

Score
8/10

Malware Config

Targets

    • Target

      DOC_6052203677US_Apr_27_2019.js

    • Size

      38KB

    • MD5

      2c255638e9f931532dc429698698fa7b

    • SHA1

      8fbdcbc759c6d373e591bf4d03639e88487b29ae

    • SHA256

      c2c75ef2cf7461733ccfcf2695ca9c2f3609ba27620ca160362ff85cd7d61559

    • SHA512

      0747f55d2494e9ae0811b435b3101ed41b66675e42cbfd1960f07e2dccb03626f815f298d0ccbb2c3b4aaff803f7ae511ac789b9f07caa669f716294d5245d66

    • SSDEEP

      768:vkPYKAKorzXDGDSvSEDmP+wZX2e2W6yz86AnWKWpkVANk6JxN:vkPYKAKorzXDGDSv2+wZG6wNgNDv

    Score
    8/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks