673792e1c6039fb1622269402f5f5570e54a81036a13b352da0b53ec201dbd4e | Triage

Sharing

General

Target

bfb2b7dea03640c6faee8e96ae2307f2_JaffaCakes118
Size

184KB
Sample

240824-3z9qnaxake
MD5

bfb2b7dea03640c6faee8e96ae2307f2
SHA1

47ab0b0a0f9d377e110aff8f117409f2ae834322
SHA256

673792e1c6039fb1622269402f5f5570e54a81036a13b352da0b53ec201dbd4e
SHA512

9498f64e8589957eb09407634cbc3b2f88dd936d3977e2e3bdb2bd0a7dbdc51999a00e9c878671f3bff6dcc237c984de633147a64d15d1e94f6b71ef91a72464
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3TI:/7BSH8zUB+nGESaaRvoB7FJNndnZ

Score

8^/10

discovery execution

Malware Config

Targets

- Target
  
  bfb2b7dea03640c6faee8e96ae2307f2_JaffaCakes118
- Size
  
  184KB
- MD5
  
  bfb2b7dea03640c6faee8e96ae2307f2
- SHA1
  
  47ab0b0a0f9d377e110aff8f117409f2ae834322
- SHA256
  
  673792e1c6039fb1622269402f5f5570e54a81036a13b352da0b53ec201dbd4e
- SHA512
  
  9498f64e8589957eb09407634cbc3b2f88dd936d3977e2e3bdb2bd0a7dbdc51999a00e9c878671f3bff6dcc237c984de633147a64d15d1e94f6b71ef91a72464
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3TI:/7BSH8zUB+nGESaaRvoB7FJNndnZ
Score

8^/10

discovery execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

behavioral2

discoveryexecution