General

  • Target

    f21fa41851acffcb7184d8528288f5ad_JaffaCakes118

  • Size

    74KB

  • Sample

    240415-2zh29scf4w

  • MD5

    f21fa41851acffcb7184d8528288f5ad

  • SHA1

    0f3ad8a05f499a8f707c28cc4f876b03659a547b

  • SHA256

    e5f794c291dafb5bfbdee1a0658f37ef4b291088bc101f61a1b2759b45aede3a

  • SHA512

    4e9739e83e02c09075098e273ff79e7466d197ea66ab7c1ebd42f6adfe045ae98dd57dffa0fb09736d464d280eb6741765d7c51b120959cfe44e8921193a5904

  • SSDEEP

    1536:5hnVQ0Q/e/nuC8CaE6Ot5u6ANvBD/fsxGp4wXus0/sQTalO:BQXG/uAmKANvBD/fub/sQGlO

Score
7/10

Malware Config

Targets

    • Target

      f21fa41851acffcb7184d8528288f5ad_JaffaCakes118

    • Size

      74KB

    • MD5

      f21fa41851acffcb7184d8528288f5ad

    • SHA1

      0f3ad8a05f499a8f707c28cc4f876b03659a547b

    • SHA256

      e5f794c291dafb5bfbdee1a0658f37ef4b291088bc101f61a1b2759b45aede3a

    • SHA512

      4e9739e83e02c09075098e273ff79e7466d197ea66ab7c1ebd42f6adfe045ae98dd57dffa0fb09736d464d280eb6741765d7c51b120959cfe44e8921193a5904

    • SSDEEP

      1536:5hnVQ0Q/e/nuC8CaE6Ot5u6ANvBD/fsxGp4wXus0/sQTalO:BQXG/uAmKANvBD/fub/sQGlO

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks