a51d541409fb3114bc3df592245ccf39a88e2dc7f4bcc3bbd1322c07c5004c04 | Triage

Sharing

General

Target

ea8f7bcd5c0e42402fd33b910839ad3f_JaffaCakes118
Size

184KB
Sample

240919-erj82azgpb
MD5

ea8f7bcd5c0e42402fd33b910839ad3f
SHA1

0723f2ee89d779d5975a75c028a8b62c7dcee102
SHA256

a51d541409fb3114bc3df592245ccf39a88e2dc7f4bcc3bbd1322c07c5004c04
SHA512

7e64b6bfa96ee221d2da1023b26039f13d963aeb60831ba141d814bab1e4810dee56386a3080bba2549915051eb378e8a3d40cc9c91147585a50e72f4ceaca3a
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO35i:/7BSH8zUB+nGESaaRvoB7FJNndnR

Score

8^/10

discovery execution

Malware Config

Targets

- Target
  
  ea8f7bcd5c0e42402fd33b910839ad3f_JaffaCakes118
- Size
  
  184KB
- MD5
  
  ea8f7bcd5c0e42402fd33b910839ad3f
- SHA1
  
  0723f2ee89d779d5975a75c028a8b62c7dcee102
- SHA256
  
  a51d541409fb3114bc3df592245ccf39a88e2dc7f4bcc3bbd1322c07c5004c04
- SHA512
  
  7e64b6bfa96ee221d2da1023b26039f13d963aeb60831ba141d814bab1e4810dee56386a3080bba2549915051eb378e8a3d40cc9c91147585a50e72f4ceaca3a
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO35i:/7BSH8zUB+nGESaaRvoB7FJNndnR
Score

8^/10

discovery execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

behavioral2

discoveryexecution