f8e7f08444f100aba137e61ac4558c4dd4880c1e4792d084e8395b076d8d3bce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56d98790378eb293a28adfd6dce616d0_JaffaCakes118
Size

2KB
Sample

241018-l6nnbstenp
MD5

56d98790378eb293a28adfd6dce616d0
SHA1

9513287166d053a0b7cdd9f72ed6528ef897c11a
SHA256

f8e7f08444f100aba137e61ac4558c4dd4880c1e4792d084e8395b076d8d3bce
SHA512

e8e94520b4c71d9feba8dd2cb9e639b1e9c8a0fb9ec6081f89f354a47908aad6a2a8f13ed4f05ac7580db8a360e557c585df0945ea97035d751efc3f77c5cb55

Score

8^/10

execution

Malware Config

Targets

- Target
  
  2019_04___REC_818396339735005___5515319530041063523.js
- Size
  
  5KB
- MD5
  
  99d671ee30cb4a19558f5ae273698ec2
- SHA1
  
  3fef1791f40149036f14b13c38a559c7b9b44571
- SHA256
  
  ffbe73591031973cb52f6950ed61b168a0f0bda69f004db08846dfc1bd1d1920
- SHA512
  
  d419fff8b98adefc5729c4c26e0456345bc7f070e43e4e0b746a94ebd8a0f57cbfce7588a887cd2247b57c3b20a2de07cfe3c417288eb684165123cdb2ab1726
- SSDEEP
  
  96:XxzObmpoVuLwUdmACxZgba5NWKjzBFj+2uv4kl7E+20dPL80XI/LgcCgmRwgmO4y:Xxa3VucqmAwZRIKjdql80XI/LgcCgmiC
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2