9d166a5b09561724122a40fee576c6ba0fc633663bb73b18d7569ea70b9dd61e | Triage

Sharing

General

Target

dd18ea86a7514af85b60d874ef64dafa_JaffaCakes118
Size

184KB
Sample

240912-1h285swhre
MD5

dd18ea86a7514af85b60d874ef64dafa
SHA1

2f7f5d0940be73785d762c11bc3860c4b8495c22
SHA256

9d166a5b09561724122a40fee576c6ba0fc633663bb73b18d7569ea70b9dd61e
SHA512

16158cb4101d14d65ff8732225d055e6c926a930a5c345570d38ff9ad8132a5fac9be8188c6f572043a278ddbcab9b80407ff468212db18d062049140681fad4
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3r:/7BSH8zUB+nGESaaRvoB7FJNndn+

Score

8^/10

discovery execution

Malware Config

Targets

- Target
  
  dd18ea86a7514af85b60d874ef64dafa_JaffaCakes118
- Size
  
  184KB
- MD5
  
  dd18ea86a7514af85b60d874ef64dafa
- SHA1
  
  2f7f5d0940be73785d762c11bc3860c4b8495c22
- SHA256
  
  9d166a5b09561724122a40fee576c6ba0fc633663bb73b18d7569ea70b9dd61e
- SHA512
  
  16158cb4101d14d65ff8732225d055e6c926a930a5c345570d38ff9ad8132a5fac9be8188c6f572043a278ddbcab9b80407ff468212db18d062049140681fad4
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3r:/7BSH8zUB+nGESaaRvoB7FJNndn+
Score

8^/10

discovery execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

behavioral2

discoveryexecution