b2fd3f055b9ba5e21f7205a325de056b5aafd9d9691ae5b033d61f251f4b96ad | Triage

Sharing

General

Target

a0c5c29cf070c7ac706118ffe46e6022_JaffaCakes118
Size

184KB
Sample

240612-qbrhyswbpc
MD5

a0c5c29cf070c7ac706118ffe46e6022
SHA1

44e447e67b4f5567ed7278ec9885618288c7c159
SHA256

b2fd3f055b9ba5e21f7205a325de056b5aafd9d9691ae5b033d61f251f4b96ad
SHA512

48aad8433747d9009dd289cdf416d57ad3da2dfc023bba1c08c9334e6424d2c7785e7ca6c6f94cbb0e2a56b92030b088d11eecc3efe522fca8813599c23ed7e4
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3u:/7BSH8zUB+nGESaaRvoB7FJNndn3

Score

7^/10

execution

Malware Config

Targets

- Target
  
  a0c5c29cf070c7ac706118ffe46e6022_JaffaCakes118
- Size
  
  184KB
- MD5
  
  a0c5c29cf070c7ac706118ffe46e6022
- SHA1
  
  44e447e67b4f5567ed7278ec9885618288c7c159
- SHA256
  
  b2fd3f055b9ba5e21f7205a325de056b5aafd9d9691ae5b033d61f251f4b96ad
- SHA512
  
  48aad8433747d9009dd289cdf416d57ad3da2dfc023bba1c08c9334e6424d2c7785e7ca6c6f94cbb0e2a56b92030b088d11eecc3efe522fca8813599c23ed7e4
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3u:/7BSH8zUB+nGESaaRvoB7FJNndn3
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2