0c7538a10638b146d638d440e86e264ef7b6070efce97f1d07886a43c2078abb | Triage

Sharing

General

Target

95ea46ab8eb07da6eac0319ab27699b4_JaffaCakes118
Size

184KB
Sample

240604-xj1vxsgg74
MD5

95ea46ab8eb07da6eac0319ab27699b4
SHA1

308a221a64df731bc53eacb6d6d2780f69003dfb
SHA256

0c7538a10638b146d638d440e86e264ef7b6070efce97f1d07886a43c2078abb
SHA512

331814c2b762931ab6dd2c8cc21259a642cd27926ea10c1d10cfe39141f23db6786a3391fb38ef26b17dba4a9354171c1ea3165e3fa9598b47f6e9cb3d7ccc37
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3f:/7BSH8zUB+nGESaaRvoB7FJNndnO

Score

8^/10

execution

Malware Config

Targets

- Target
  
  95ea46ab8eb07da6eac0319ab27699b4_JaffaCakes118
- Size
  
  184KB
- MD5
  
  95ea46ab8eb07da6eac0319ab27699b4
- SHA1
  
  308a221a64df731bc53eacb6d6d2780f69003dfb
- SHA256
  
  0c7538a10638b146d638d440e86e264ef7b6070efce97f1d07886a43c2078abb
- SHA512
  
  331814c2b762931ab6dd2c8cc21259a642cd27926ea10c1d10cfe39141f23db6786a3391fb38ef26b17dba4a9354171c1ea3165e3fa9598b47f6e9cb3d7ccc37
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3f:/7BSH8zUB+nGESaaRvoB7FJNndnO
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2