General

  • Target

    b8995a04d53c2da3b673410c492dd664_JaffaCakes118

  • Size

    15.9MB

  • Sample

    240404-pwlmrsgd77

  • MD5

    b8995a04d53c2da3b673410c492dd664

  • SHA1

    7e71194620396f257d9b7f3be88d08d6e0f69898

  • SHA256

    cfa14e3aa7cfc2dd4a3dbe6a4ff326c6ae5fc1a82f249483b59b355cb96b9af4

  • SHA512

    e61e1b49da5dd4de950664ae8e1da08054a208a014069992d034b506fd6995290d780605b643672989ab0e98796a2701642a9fa136f9aea2d5a3e0dce6ce950b

  • SSDEEP

    393216:1g7uDg7uDg7uDg7uDg7uDg7uDg7uDg7uN:+SkSkSkSkSkSkSkSN

Score
7/10

Malware Config

Targets

    • Target

      b8995a04d53c2da3b673410c492dd664_JaffaCakes118

    • Size

      15.9MB

    • MD5

      b8995a04d53c2da3b673410c492dd664

    • SHA1

      7e71194620396f257d9b7f3be88d08d6e0f69898

    • SHA256

      cfa14e3aa7cfc2dd4a3dbe6a4ff326c6ae5fc1a82f249483b59b355cb96b9af4

    • SHA512

      e61e1b49da5dd4de950664ae8e1da08054a208a014069992d034b506fd6995290d780605b643672989ab0e98796a2701642a9fa136f9aea2d5a3e0dce6ce950b

    • SSDEEP

      393216:1g7uDg7uDg7uDg7uDg7uDg7uDg7uDg7uN:+SkSkSkSkSkSkSkSN

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks