7827a371a9ee2665af0b85718acd37162461dbdc6142feeae06e9eb79ba19293 | Triage

Sharing

General

Target

b0e629e8b6cc783a05df2baa328ca29a_JaffaCakes118
Size

7KB
Sample

240616-astfwavgjq
MD5

b0e629e8b6cc783a05df2baa328ca29a
SHA1

1748cbc3e9f0ad730344bb42bacf74337e5c645d
SHA256

7827a371a9ee2665af0b85718acd37162461dbdc6142feeae06e9eb79ba19293
SHA512

fadc4275fc834f1b4ad39b68dd394129d2d580abb06bfbe7187eea15f8ced5f243debf3d7d0d888f0de5b29ff1250ef6af3d0d7bd4ae7703ac53e441acfeebef
SSDEEP

192:4JxhjNzCCCoBsd73kCVVsQhZ+ktmLDdcpaskLZ4+wd:4JxhjNlCUmAeVttmLhcNd

Score

8^/10

execution

Malware Config

Targets

- Target
  
  L-730291-04242019.js
- Size
  
  30KB
- MD5
  
  d8dd72216bd060322ac46c7257740ffb
- SHA1
  
  7fda43b576dbdce7861163ee564b25cf6eb5ddd6
- SHA256
  
  fefeae81b80a964d3c5ea9071faa2c207766e7b929a15049a4aa2087e56684da
- SHA512
  
  33ec8c9a52e27e626e90ca88e285b1c9f007a9b2548ae55e104470f751e60653c7e4bcc6c3b3a6f12ad1d88f9e4356bc219b32ac9e6c23636b15aaed7b699813
- SSDEEP
  
  768:yV+kwj15VdeIkjjSLT5uJT5BkMkqzB35xIkPVeJMXFpB6X88QjfsCE4F8kuF8vf3:yV+kAVdeIkjjST5uJEMkqzd5xvIChSF2
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2