f78402ac5f696919d453f3195e3db802c1effee29505729692edf7194055ce21 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9d385c8f734fd68931203511e74177a_JaffaCakes118
Size

9KB
Sample

240927-gev6wa1bmb
MD5

f9d385c8f734fd68931203511e74177a
SHA1

bfe59e85a89de049943c151d22d9d458d8ccbb1e
SHA256

f78402ac5f696919d453f3195e3db802c1effee29505729692edf7194055ce21
SHA512

267e6806ca0a6e47c86edd42d0d0c2b07184709657e37729ca8238994070e13dc1c247232444c5e5b58382aafd8e188adbd5e9d16689244ffffc8cf07b17b8fe
SSDEEP

192:BgjKnzObUPDzKTlNTczINC/Zesg0khPtVLWMbnJjJUJcPpTEF:BgmnKpRccN8kFrHJjJJPaF

Score

8^/10

execution

Malware Config

Targets

- Target
  
  01052019-02DC42822-4895690A.js
- Size
  
  46KB
- MD5
  
  d7b20b2cf020a260c97cd1493a94fc51
- SHA1
  
  4a903fba618b31f5159474c9e1b8b8826712b4d6
- SHA256
  
  aeeb4d50eedd8fd602417c1d59e0d0b6b3d08c4d8045eae9b69e3b1777048062
- SHA512
  
  d7f839e473566c82a6d34b4baf96f28a04c0bfbfd09ecdcce860412f9b912dba761d9acccd542ab0a6d2ab4b415b01e8bd1ea84ce697dddf5a6245887b6ce005
- SSDEEP
  
  768:pwkZXi7LIcEf8HSLiFV2kBY0jKj390jVImehVTu2xA2uRx6LN3A+m4T+uUghMNF6:ppi7LIcEf8HSLiFV2kB7jKjSam4dUuaC
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2