General

  • Target

    be0e11ce6a6dd578868e9b7112f4b5ff_JaffaCakes118

  • Size

    17KB

  • Sample

    240404-vrxr5adc7v

  • MD5

    be0e11ce6a6dd578868e9b7112f4b5ff

  • SHA1

    88c5ed593e94c9f9076bc3f16a85c3573c2eae51

  • SHA256

    88c64283ac1677074e827a4d7787bcb7d858eb4e8e6de3aa701ea02379e6f7a3

  • SHA512

    e0f154bcf45c3f710abbe2292f67dad944429b39d6da073c6d966af352e23727282f04493cd27e3837736075664c008d578651b02debfd11323e44e36f7fe2e8

  • SSDEEP

    384:4FgaLo0ZcmZO2Zp+Nye8pqrmub8TyztsDN:4ux0ZoKK8o8TyJc

Score
8/10

Malware Config

Targets

    • Target

      be0e11ce6a6dd578868e9b7112f4b5ff_JaffaCakes118

    • Size

      17KB

    • MD5

      be0e11ce6a6dd578868e9b7112f4b5ff

    • SHA1

      88c5ed593e94c9f9076bc3f16a85c3573c2eae51

    • SHA256

      88c64283ac1677074e827a4d7787bcb7d858eb4e8e6de3aa701ea02379e6f7a3

    • SHA512

      e0f154bcf45c3f710abbe2292f67dad944429b39d6da073c6d966af352e23727282f04493cd27e3837736075664c008d578651b02debfd11323e44e36f7fe2e8

    • SSDEEP

      384:4FgaLo0ZcmZO2Zp+Nye8pqrmub8TyztsDN:4ux0ZoKK8o8TyJc

    Score
    8/10
    • Sets file execution options in registry

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks