1f267b968177e21393d45982a9b28038757f02f6b8b1a2a1a4a3969cd609d826 | Triage

Sharing

General

Target

9fc62c51336e76b350dde6525bd15742_JaffaCakes118
Size

184KB
Sample

240611-2kb1eavcme
MD5

9fc62c51336e76b350dde6525bd15742
SHA1

22ddd508fb89d86b2d389803347c2a2082af5c9b
SHA256

1f267b968177e21393d45982a9b28038757f02f6b8b1a2a1a4a3969cd609d826
SHA512

b33c24d6f9b5c564339de2747c1855a0796f4eb638d3263c4c6db0ee05db39176cfbd68942325da97119db32677222ac338ec08edee42a00882a33d9f32fdb23
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO38:/7BSH8zUB+nGESaaRvoB7FJNndn9

Score

8^/10

execution

Malware Config

Targets

- Target
  
  9fc62c51336e76b350dde6525bd15742_JaffaCakes118
- Size
  
  184KB
- MD5
  
  9fc62c51336e76b350dde6525bd15742
- SHA1
  
  22ddd508fb89d86b2d389803347c2a2082af5c9b
- SHA256
  
  1f267b968177e21393d45982a9b28038757f02f6b8b1a2a1a4a3969cd609d826
- SHA512
  
  b33c24d6f9b5c564339de2747c1855a0796f4eb638d3263c4c6db0ee05db39176cfbd68942325da97119db32677222ac338ec08edee42a00882a33d9f32fdb23
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO38:/7BSH8zUB+nGESaaRvoB7FJNndn9
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2