cc47f4b3c11594f538567504ec510a15b2dbbc896f0581e15b584784a9c0089b | Triage

Sharing

General

Target

ddfab98d76f047460a7f51e977639f22_JaffaCakes118
Size

6KB
Sample

240913-jkjq5sseja
MD5

ddfab98d76f047460a7f51e977639f22
SHA1

24e293405d458621ba2bdc306f6abd49659d0598
SHA256

cc47f4b3c11594f538567504ec510a15b2dbbc896f0581e15b584784a9c0089b
SHA512

63f084ef7825540cb8e090fb965ffbbdba70dde9590885965621621b8e72c14c7ecfa17d4f128a5a4a7a1390ef6603ed9e6e66c316658880702028f9de541774
SSDEEP

192:Nj3+tfh/I0f0GaDeFl0xhSA8q/WzkVH6PHVke:N6tfhBOiP0LTizkJ6Nke

Score

8^/10

execution

Malware Config

Targets

- Target
  
  H_52218956_04242019.js
- Size
  
  26KB
- MD5
  
  dc325decfb873739d6c09055b09fc043
- SHA1
  
  50dfe46b30f8dee35bc6f1285138e3dd631165ee
- SHA256
  
  f9a3d8d2568059bff0da6d27fe8d474fa8dc1c0f97c24433f2fd9caed3594b0f
- SHA512
  
  3a468cb4ad8ebc69cd53891868949856bd5877b72191bcc500b097bd2e090ee326ca8ef82b6f0d69f9296ab79091c57788d09f905f9b8eefd87a34af3aad341f
- SSDEEP
  
  768:/mpSpUgP3uPJSNRAyMLNhRKl0TSGkFDbLKXyAXStfwzrR2nr2IT1JRT2xML1i7GS:OpSpUgP3kSNJMLAqqo
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2