84656d6694b0349e500b73aba811874ab466ad747043494377d797b7edae5856 | Triage

Sharing

General

Target

9325f427cb1921de16d5338e6b7f9c55_JaffaCakes118
Size

184KB
Sample

240604-axnq7afg23
MD5

9325f427cb1921de16d5338e6b7f9c55
SHA1

c20d3ba81024936e26d4a5d128d85170aba1d8b4
SHA256

84656d6694b0349e500b73aba811874ab466ad747043494377d797b7edae5856
SHA512

fdff4c9ba372be6054bf42bd9a3307431febb5f0610943303da680a204d693d4d26ba694042bd0f16f29fc8a9060a116fdfa598443c4eea819838a2dd308ec8a
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3a:/7BSH8zUB+nGESaaRvoB7FJNndnX

Score

8^/10

execution

Malware Config

Targets

- Target
  
  9325f427cb1921de16d5338e6b7f9c55_JaffaCakes118
- Size
  
  184KB
- MD5
  
  9325f427cb1921de16d5338e6b7f9c55
- SHA1
  
  c20d3ba81024936e26d4a5d128d85170aba1d8b4
- SHA256
  
  84656d6694b0349e500b73aba811874ab466ad747043494377d797b7edae5856
- SHA512
  
  fdff4c9ba372be6054bf42bd9a3307431febb5f0610943303da680a204d693d4d26ba694042bd0f16f29fc8a9060a116fdfa598443c4eea819838a2dd308ec8a
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3a:/7BSH8zUB+nGESaaRvoB7FJNndnX
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2