a9821cd34c767c9e402d44864fe92c3407b4eaa241388bae58b1ce9fd68f3e6c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9047ee0a80caa0b6f25933124da9e270_JaffaCakes118
Size

184KB
Sample

240603-c5w4msgd5w
MD5

9047ee0a80caa0b6f25933124da9e270
SHA1

a53c9915e38001aa7eb6afea38e1e3ba5c5cb10e
SHA256

a9821cd34c767c9e402d44864fe92c3407b4eaa241388bae58b1ce9fd68f3e6c
SHA512

8e5c4627e745a73e17e059abb57bd13c83d5a8218669a5d7ab9941e79753127980ed9d504107782c7436efe22568990e3832ac79791a1bdeb30b36f8748c0352
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3I:/7BSH8zUB+nGESaaRvoB7FJNndnR

Score

8^/10

execution

Malware Config

Targets

- Target
  
  9047ee0a80caa0b6f25933124da9e270_JaffaCakes118
- Size
  
  184KB
- MD5
  
  9047ee0a80caa0b6f25933124da9e270
- SHA1
  
  a53c9915e38001aa7eb6afea38e1e3ba5c5cb10e
- SHA256
  
  a9821cd34c767c9e402d44864fe92c3407b4eaa241388bae58b1ce9fd68f3e6c
- SHA512
  
  8e5c4627e745a73e17e059abb57bd13c83d5a8218669a5d7ab9941e79753127980ed9d504107782c7436efe22568990e3832ac79791a1bdeb30b36f8748c0352
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3I:/7BSH8zUB+nGESaaRvoB7FJNndnR
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2