General

  • Target

    b8d272df7aabcd95d8891e14abb641e5_JaffaCakes118

  • Size

    178KB

  • Sample

    240404-p4mvssgh68

  • MD5

    b8d272df7aabcd95d8891e14abb641e5

  • SHA1

    f33dea469743806b4f25c230c2c590d4ba39d193

  • SHA256

    d779e1b9b965342481f87fc756c097f891ad2a68cc697dba97e17a3eff5524b9

  • SHA512

    e211218071915fcd4fe6b5ee5aeaaae9c98507a2910f6fbe6c7d2b145dc7f69ac4019633194b22682c6c22a388ca94e01b328e2ddcbdac34d1c1a0f2294ca5fe

  • SSDEEP

    3072:uPMZPJnJ1BRBsipN2HbdUyyuzgKwr9bB1t4xO67y5j:ugP9Hv6ipwHxUUdK9NT4xO6

Score
8/10

Malware Config

Targets

    • Target

      b8d272df7aabcd95d8891e14abb641e5_JaffaCakes118

    • Size

      178KB

    • MD5

      b8d272df7aabcd95d8891e14abb641e5

    • SHA1

      f33dea469743806b4f25c230c2c590d4ba39d193

    • SHA256

      d779e1b9b965342481f87fc756c097f891ad2a68cc697dba97e17a3eff5524b9

    • SHA512

      e211218071915fcd4fe6b5ee5aeaaae9c98507a2910f6fbe6c7d2b145dc7f69ac4019633194b22682c6c22a388ca94e01b328e2ddcbdac34d1c1a0f2294ca5fe

    • SSDEEP

      3072:uPMZPJnJ1BRBsipN2HbdUyyuzgKwr9bB1t4xO67y5j:ugP9Hv6ipwHxUUdK9NT4xO6

    Score
    8/10
    • Adds policy Run key to start application

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks