262a372f4d3d8f20f864c87f103a2771958a377b4c1585ca9c17ebb88521493f | Triage

Sharing

General

Target

9b3e389444851c12149eced55e41d1c5_JaffaCakes118
Size

184KB
Sample

240610-tg1wcssdrb
MD5

9b3e389444851c12149eced55e41d1c5
SHA1

0464eb5a621acec92c13d3cbf08ec2b8d5050662
SHA256

262a372f4d3d8f20f864c87f103a2771958a377b4c1585ca9c17ebb88521493f
SHA512

89a11f369bc52b5ab6add629d04a38639e65b1e29f74a75ebd4e10613a226973a62c01a58b7c20116b607dd1cb902e49f0316a2648f1432956ec661e9216191a
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3K:/7BSH8zUB+nGESaaRvoB7FJNndnn

Score

8^/10

execution

Malware Config

Targets

- Target
  
  9b3e389444851c12149eced55e41d1c5_JaffaCakes118
- Size
  
  184KB
- MD5
  
  9b3e389444851c12149eced55e41d1c5
- SHA1
  
  0464eb5a621acec92c13d3cbf08ec2b8d5050662
- SHA256
  
  262a372f4d3d8f20f864c87f103a2771958a377b4c1585ca9c17ebb88521493f
- SHA512
  
  89a11f369bc52b5ab6add629d04a38639e65b1e29f74a75ebd4e10613a226973a62c01a58b7c20116b607dd1cb902e49f0316a2648f1432956ec661e9216191a
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3K:/7BSH8zUB+nGESaaRvoB7FJNndnn
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2