5a531abdbc9327c04035951f175682d0272c0c62f484b8adb7e0c8fc97fe397b | Triage

Sharing

General

Target

f6d885fd766bea14a67d5302ca3d258f_JaffaCakes118
Size

184KB
Sample

240925-zrwbhsxdpn
MD5

f6d885fd766bea14a67d5302ca3d258f
SHA1

044e4aa23ea461d70f73bd9bcd5365d0c9ded3f8
SHA256

5a531abdbc9327c04035951f175682d0272c0c62f484b8adb7e0c8fc97fe397b
SHA512

0d7ed97b9c05cff41fc81597a4cd932e1d2e3c8ee0a9d8108fafb7d43448e46d2db52558f87091832048a90c1d11085f6eaa1161cd220b7568f32c8c5d903cf2
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3l:/7BSH8zUB+nGESaaRvoB7FJNndns

Score

8^/10

discovery execution

Malware Config

Targets

- Target
  
  f6d885fd766bea14a67d5302ca3d258f_JaffaCakes118
- Size
  
  184KB
- MD5
  
  f6d885fd766bea14a67d5302ca3d258f
- SHA1
  
  044e4aa23ea461d70f73bd9bcd5365d0c9ded3f8
- SHA256
  
  5a531abdbc9327c04035951f175682d0272c0c62f484b8adb7e0c8fc97fe397b
- SHA512
  
  0d7ed97b9c05cff41fc81597a4cd932e1d2e3c8ee0a9d8108fafb7d43448e46d2db52558f87091832048a90c1d11085f6eaa1161cd220b7568f32c8c5d903cf2
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3l:/7BSH8zUB+nGESaaRvoB7FJNndns
Score

8^/10

discovery execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

behavioral2

discoveryexecution