891dc3121e37c8ea9f5008713db4a8f47c5078797af1e7e7af51f09951e405a1 | Triage

Sharing

General

Target

8cd910b60a329c71c1e33c2c9e48f00e_JaffaCakes118
Size

184KB
Sample

240602-epaltaad7z
MD5

8cd910b60a329c71c1e33c2c9e48f00e
SHA1

1ac7dcc0d7252d56cf0013e02efe5ceebb9a18e4
SHA256

891dc3121e37c8ea9f5008713db4a8f47c5078797af1e7e7af51f09951e405a1
SHA512

f606f3ff55fec7a7977108a70b120c1c1337c6edb32a8a07a41ebe331b4b455bf4c22d4a7e480615b11ddf75ac520271a39669bc0e44f662432c923aba298b54
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3l:/7BSH8zUB+nGESaaRvoB7FJNndnI

Score

8^/10

execution

Malware Config

Targets

- Target
  
  8cd910b60a329c71c1e33c2c9e48f00e_JaffaCakes118
- Size
  
  184KB
- MD5
  
  8cd910b60a329c71c1e33c2c9e48f00e
- SHA1
  
  1ac7dcc0d7252d56cf0013e02efe5ceebb9a18e4
- SHA256
  
  891dc3121e37c8ea9f5008713db4a8f47c5078797af1e7e7af51f09951e405a1
- SHA512
  
  f606f3ff55fec7a7977108a70b120c1c1337c6edb32a8a07a41ebe331b4b455bf4c22d4a7e480615b11ddf75ac520271a39669bc0e44f662432c923aba298b54
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3l:/7BSH8zUB+nGESaaRvoB7FJNndnI
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2