f147296f9aeeb6f125d6d772b0a3fd9c7fbd00fc8edacdd858e34aa016140839 | Triage

Sharing

General

Target

b5217014bedc389e08aac73d8106d899_JaffaCakes118
Size

7KB
Sample

240616-zlmr7axcrf
MD5

b5217014bedc389e08aac73d8106d899
SHA1

5b103de48f89633cea192e8b45238eb7062f0a6b
SHA256

f147296f9aeeb6f125d6d772b0a3fd9c7fbd00fc8edacdd858e34aa016140839
SHA512

8db2a07a6652d060960a0f823315fd3499bce9ae3f6212b2d82c003ad6a7b89164ad0ec5872f056a0ef57dad0c98b94a07b8fa0d805a337b9355f6d3ca178ea6
SSDEEP

192:Qdqjaicir4XMrOlLAmdawJztfIg2Btr0yf+PGik4EyN:Qduc4YECLM6tR23h1F4PN

Score

8^/10

execution

Malware Config

Targets

- Target
  
  R_826351_04262019.js
- Size
  
  29KB
- MD5
  
  2b9f698df81d9c09f39bd967f39d7709
- SHA1
  
  8435bcab0bcd083c99c7f9d60b35f952fa74394d
- SHA256
  
  e11971bb129e8d7af3c1fc7675d3d2eb5fb7828d431969087ee876b78b7dc889
- SHA512
  
  562c6b7ae45616e1536f62d359313781dce176a31fd559d115f094f07aaaed3186518277401be955ec82f3f75a82b90435781468276971e7f827630eb35e6ceb
- SSDEEP
  
  768:ubn/Lo1ZCTRToP8MCMnKSD/7xIHGD0P2wjAiEjtlN0uHauHhfXT0K7irxxhTcCYx:ub/LozC1M8MCMnh30S3VP7NDF+gjWc
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2