d2a7f9508dc4d98fa3eda1937d2f5351d82bb0aad3c39855edfd24e9f816e031 | Triage

Sharing

General

Target

d285837067dfca40efcd981fcc86e3ef_JaffaCakes118
Size

11KB
Sample

240907-wjtk6syfkf
MD5

d285837067dfca40efcd981fcc86e3ef
SHA1

0166b07cc2976d8c26eb00de641a92975eda9488
SHA256

d2a7f9508dc4d98fa3eda1937d2f5351d82bb0aad3c39855edfd24e9f816e031
SHA512

41572e25356d51f5ff1d4b9feb89e1ae43e2d36d44f71b707dbc8309c0d192683b73a54332d15498b2fcf5634888331e05ca52d07610ece24dea148c7c88b717
SSDEEP

192:AiE8PSEt4IlcZVi/mHPMQwyTE9Zqw7d+Qgfw6rVhYC2HPAadtDFa9wUbBfLR+enW:H/PS+VluLjwyTyqSIQB65hr2H4adNw9A

Score

8^/10

execution

Malware Config

Targets

- Target
  
  FILE_59754470130US_Apr_27_2019.js
- Size
  
  38KB
- MD5
  
  2c255638e9f931532dc429698698fa7b
- SHA1
  
  8fbdcbc759c6d373e591bf4d03639e88487b29ae
- SHA256
  
  c2c75ef2cf7461733ccfcf2695ca9c2f3609ba27620ca160362ff85cd7d61559
- SHA512
  
  0747f55d2494e9ae0811b435b3101ed41b66675e42cbfd1960f07e2dccb03626f815f298d0ccbb2c3b4aaff803f7ae511ac789b9f07caa669f716294d5245d66
- SSDEEP
  
  768:vkPYKAKorzXDGDSvSEDmP+wZX2e2W6yz86AnWKWpkVANk6JxN:vkPYKAKorzXDGDSv2+wZG6wNgNDv
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2