81c96a889f6095e84ff6b8bf1d48eb524c4ed5fa3a013e335864ab1fb71133f2 | Triage

Sharing

General

Target

4969f8916c7b2d08173c9d8214f4200c_JaffaCakes118
Size

150B
Sample

240715-mm81lasbqn
MD5

4969f8916c7b2d08173c9d8214f4200c
SHA1

aeba793b1ff57f6273968ad1c1688cb1aa5e2df8
SHA256

81c96a889f6095e84ff6b8bf1d48eb524c4ed5fa3a013e335864ab1fb71133f2
SHA512

e91829594fbc683e6df43548b774c158343ee1ae26abb5158ca1b23e50558f54a1208d31426fcfaf486355682b5ede03abe52a93125a50bbd341ad29d2d3bd52

Score

8^/10

execution

Malware Config

Targets

- Target
  
  4969f8916c7b2d08173c9d8214f4200c_JaffaCakes118
- Size
  
  150B
- MD5
  
  4969f8916c7b2d08173c9d8214f4200c
- SHA1
  
  aeba793b1ff57f6273968ad1c1688cb1aa5e2df8
- SHA256
  
  81c96a889f6095e84ff6b8bf1d48eb524c4ed5fa3a013e335864ab1fb71133f2
- SHA512
  
  e91829594fbc683e6df43548b774c158343ee1ae26abb5158ca1b23e50558f54a1208d31426fcfaf486355682b5ede03abe52a93125a50bbd341ad29d2d3bd52
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2