3669bcdc40eeb2afbacacf30538b4bea186dbd4796d534d868c64fb3271a9580 | Triage

Sharing

General

Target

eaacb409d2ab7e121bf2b5de7b8653c0_JaffaCakes118
Size

11KB
Sample

240919-f7bghatbmp
MD5

eaacb409d2ab7e121bf2b5de7b8653c0
SHA1

83fa9e77830e665c9359a572b5030f1d6e3a37c4
SHA256

3669bcdc40eeb2afbacacf30538b4bea186dbd4796d534d868c64fb3271a9580
SHA512

a67616cc4ff46f2c060b4bc498fa5a731025ac4f2e46a965c00962ec954efc016c5f3e2540fe4be1af2c7152495568727bc61a6acabbfeb031322a87e7a3bc95
SSDEEP

192:8E8PSEt4IlcZVi/mHPMQwyTE9Zqw7d+Qgfw6rVhYC2HPAadtDFa9wUbBfLR+engI:8/PS+VluLjwyTyqSIQB65hr2H4adNw9T

Score

8^/10

execution

Malware Config

Targets

- Target
  
  LLC_3901020357US_Apr_27_2019.js
- Size
  
  38KB
- MD5
  
  2c255638e9f931532dc429698698fa7b
- SHA1
  
  8fbdcbc759c6d373e591bf4d03639e88487b29ae
- SHA256
  
  c2c75ef2cf7461733ccfcf2695ca9c2f3609ba27620ca160362ff85cd7d61559
- SHA512
  
  0747f55d2494e9ae0811b435b3101ed41b66675e42cbfd1960f07e2dccb03626f815f298d0ccbb2c3b4aaff803f7ae511ac789b9f07caa669f716294d5245d66
- SSDEEP
  
  768:vkPYKAKorzXDGDSvSEDmP+wZX2e2W6yz86AnWKWpkVANk6JxN:vkPYKAKorzXDGDSv2+wZG6wNgNDv
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2