2cfd6d0dcd74e58b44e27e7b7d9d523dfeb320c923d7f4491196c60dcb67a7a9 | Triage

Sharing

General

Target

99fe1589c6224c4723c097fde3e0f6a0_JaffaCakes118
Size

8KB
Sample

240606-fh9b8shh67
MD5

99fe1589c6224c4723c097fde3e0f6a0
SHA1

d67b43dab982db56ab59798ecca9d0f51809c4d8
SHA256

2cfd6d0dcd74e58b44e27e7b7d9d523dfeb320c923d7f4491196c60dcb67a7a9
SHA512

441420e9738bf000305de69efb76be75baa6c16502d2ab2ba376604253696a5780a79d18f7056eb247ffefbb4605664eefae0013818a0c8c937dec0e1cb8f2aa
SSDEEP

192:pqY7nED2WWS7Pfmi47prLfBnxEOnk+IM+CReE4Cbkooxr2iLFvi6M:wY7N8XS7PxE6/+9ESoE7M

Score

8^/10

execution

Malware Config

Targets

- Target
  
  30042019_856WS9878_6217H.js
- Size
  
  39KB
- MD5
  
  9e4a30bf86fb628646763f488143eb4f
- SHA1
  
  64e2057a945093a895d20fc5013f89ef7129b5e2
- SHA256
  
  540c0900a7015fd3e5ec53ebd39775bac8e09a7374dfe1b1ef0437cc5665b66f
- SHA512
  
  6e381d207368f25844a79adb917e0ced71c9bda359d50fb25188337b4d731f4dd9d80ce30d126faaf6fdfa332ca983c0baa8221e22270343347f93b7283fd847
- SSDEEP
  
  768:jRE1LXMELgn0DeBU3P8AxC7kFbBzVgIiS6Y27npXxWGOW1SM1+hdoUWEbbwT4zAi:joL8nc7fzllE0WPY
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2