fc79b49e3af566e67fa165c6ce098abf921bb32e979cb63824cdfc972baa5c2d | Triage

Sharing

General

Target

9a14d3ea3b1c04ce0581661a6b75e24c_JaffaCakes118
Size

184KB
Sample

240606-ggvm5aag47
MD5

9a14d3ea3b1c04ce0581661a6b75e24c
SHA1

08b2deac27376195c9a241a08b8918b2941b9ad9
SHA256

fc79b49e3af566e67fa165c6ce098abf921bb32e979cb63824cdfc972baa5c2d
SHA512

7b3e6f434ef01c3c6348f75d5d709b37c266876f48668f3b9171f90e60c75016c83e7233c7f68495b3cccf9cade935a17a46cc46819f31f68760403fb0819f01
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3F:/7BSH8zUB+nGESaaRvoB7FJNndno

Score

8^/10

execution

Malware Config

Targets

- Target
  
  9a14d3ea3b1c04ce0581661a6b75e24c_JaffaCakes118
- Size
  
  184KB
- MD5
  
  9a14d3ea3b1c04ce0581661a6b75e24c
- SHA1
  
  08b2deac27376195c9a241a08b8918b2941b9ad9
- SHA256
  
  fc79b49e3af566e67fa165c6ce098abf921bb32e979cb63824cdfc972baa5c2d
- SHA512
  
  7b3e6f434ef01c3c6348f75d5d709b37c266876f48668f3b9171f90e60c75016c83e7233c7f68495b3cccf9cade935a17a46cc46819f31f68760403fb0819f01
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3F:/7BSH8zUB+nGESaaRvoB7FJNndno
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2