d754b389f17150d893187908c2256f7c969a2c997712a82a88cbb10b69c8af25 | Triage

Sharing

General

Target

a6f2f0c9d2e734192b4968bcf154f6fa_JaffaCakes118
Size

184KB
Sample

240613-2nqb7stcrf
MD5

a6f2f0c9d2e734192b4968bcf154f6fa
SHA1

f2d2692560633526a4f2140e17294e948bf423c8
SHA256

d754b389f17150d893187908c2256f7c969a2c997712a82a88cbb10b69c8af25
SHA512

33b6881c777953737db0e517a86a815635e3be46eac21c32a2d72c30c6c2be40e87c9bea7a522223844f35fc10f22c5e77d33bdf60f677eef12f6f05738083dd
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO35:/7BSH8zUB+nGESaaRvoB7FJNndn0

Score

8^/10

execution

Malware Config

Targets

- Target
  
  a6f2f0c9d2e734192b4968bcf154f6fa_JaffaCakes118
- Size
  
  184KB
- MD5
  
  a6f2f0c9d2e734192b4968bcf154f6fa
- SHA1
  
  f2d2692560633526a4f2140e17294e948bf423c8
- SHA256
  
  d754b389f17150d893187908c2256f7c969a2c997712a82a88cbb10b69c8af25
- SHA512
  
  33b6881c777953737db0e517a86a815635e3be46eac21c32a2d72c30c6c2be40e87c9bea7a522223844f35fc10f22c5e77d33bdf60f677eef12f6f05738083dd
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO35:/7BSH8zUB+nGESaaRvoB7FJNndn0
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2