15d89b71aeafa09201c03a021136cf8cd12b5879c0bf6c7154d4a5e31d0ff3f6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

949a5b52eabe2d8c12af9d5166575adf_JaffaCakes118
Size

184KB
Sample

240604-m7l2kaeb3w
MD5

949a5b52eabe2d8c12af9d5166575adf
SHA1

8fa5c015524f30911c8ebaee5e33663af9749a92
SHA256

15d89b71aeafa09201c03a021136cf8cd12b5879c0bf6c7154d4a5e31d0ff3f6
SHA512

38da348a6ab1c6fbb2fd868ad6edd9c45eb655e3f7aecf91308770825ec1535f28f5173ecc970662e1e17a67b61096317a48a40fade951fccb517c87ef889ee5
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3+:/7BSH8zUB+nGESaaRvoB7FJNndn7

Score

8^/10

execution

Malware Config

Targets

- Target
  
  949a5b52eabe2d8c12af9d5166575adf_JaffaCakes118
- Size
  
  184KB
- MD5
  
  949a5b52eabe2d8c12af9d5166575adf
- SHA1
  
  8fa5c015524f30911c8ebaee5e33663af9749a92
- SHA256
  
  15d89b71aeafa09201c03a021136cf8cd12b5879c0bf6c7154d4a5e31d0ff3f6
- SHA512
  
  38da348a6ab1c6fbb2fd868ad6edd9c45eb655e3f7aecf91308770825ec1535f28f5173ecc970662e1e17a67b61096317a48a40fade951fccb517c87ef889ee5
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3+:/7BSH8zUB+nGESaaRvoB7FJNndn7
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2