63157b7555423be096a5036e208b778113429bf7ab8e4fb7290e6eb9943bb1ef | Triage

Sharing

General

Target

da8f5337c123e5864a9aed3e15022c92_JaffaCakes118
Size

6KB
Sample

240911-ryapdswbkj
MD5

da8f5337c123e5864a9aed3e15022c92
SHA1

9f77fa5ca0809c311f9711bbe6f6929f07b790af
SHA256

63157b7555423be096a5036e208b778113429bf7ab8e4fb7290e6eb9943bb1ef
SHA512

8d4356318969a59e251cafd391c0fba44bb034c48853eee04f270b2c6606eba48957b451fae8a1dea92ebf1fcf06e21c122c8458c9329520d9a1964b8debd840
SSDEEP

192:Tj3+tfh/I0f0GaDeFl0xhSA8q/WzkVH6PHVkY:T6tfhBOiP0LTizkJ6NkY

Score

8^/10

execution

Malware Config

Targets

- Target
  
  AG_194921_04242019.js
- Size
  
  26KB
- MD5
  
  dc325decfb873739d6c09055b09fc043
- SHA1
  
  50dfe46b30f8dee35bc6f1285138e3dd631165ee
- SHA256
  
  f9a3d8d2568059bff0da6d27fe8d474fa8dc1c0f97c24433f2fd9caed3594b0f
- SHA512
  
  3a468cb4ad8ebc69cd53891868949856bd5877b72191bcc500b097bd2e090ee326ca8ef82b6f0d69f9296ab79091c57788d09f905f9b8eefd87a34af3aad341f
- SSDEEP
  
  768:/mpSpUgP3uPJSNRAyMLNhRKl0TSGkFDbLKXyAXStfwzrR2nr2IT1JRT2xML1i7GS:OpSpUgP3kSNJMLAqqo
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2