9e1d14a8245a6dea1c665c6c89afcccb15f049effb192748ec0baf00776e31a5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11719fc56513dfea31afdfe281c20238_JaffaCakes118
Size

184KB
Sample

241004-cvbpyszaqm
MD5

11719fc56513dfea31afdfe281c20238
SHA1

f9afdd17649c0c7823e357808439e94a7011791b
SHA256

9e1d14a8245a6dea1c665c6c89afcccb15f049effb192748ec0baf00776e31a5
SHA512

3abcb7e4492d7248e6912c0e37bb6dc5c76bedf7bb407e0a17219421be70d45c7810513c04bb9cb105a0daad956ea534d8fc855ffaffb09bafc2902167b23e29
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO30e:/7BSH8zUB+nGESaaRvoB7FJNndne

Score

8^/10

discovery execution

Malware Config

Targets

- Target
  
  11719fc56513dfea31afdfe281c20238_JaffaCakes118
- Size
  
  184KB
- MD5
  
  11719fc56513dfea31afdfe281c20238
- SHA1
  
  f9afdd17649c0c7823e357808439e94a7011791b
- SHA256
  
  9e1d14a8245a6dea1c665c6c89afcccb15f049effb192748ec0baf00776e31a5
- SHA512
  
  3abcb7e4492d7248e6912c0e37bb6dc5c76bedf7bb407e0a17219421be70d45c7810513c04bb9cb105a0daad956ea534d8fc855ffaffb09bafc2902167b23e29
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO30e:/7BSH8zUB+nGESaaRvoB7FJNndne
Score

8^/10

discovery execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

behavioral2

discoveryexecution