General

  • Target

    01c07d09ff212f857e96c20e57e4b4fc_JaffaCakes118

  • Size

    208KB

  • Sample

    240426-1txg2ada27

  • MD5

    01c07d09ff212f857e96c20e57e4b4fc

  • SHA1

    641f73b9004808f62c308c634993ed4137cee914

  • SHA256

    21579b6c8c0f5588ab7c20813f1fb0ba52e9a1647733456a39529327c45af8ed

  • SHA512

    8ddc52aa7fc4e31f335ae03d7caca969961efe66cd4253eb02ba495e737d0b59854ba8db123bc3b316cde8f00b3de185120a22d259d3484f3e100a4ea67066d1

  • SSDEEP

    6144:arYTgEMnRNL+I3YHBC/vMYRbbdfHKpkEj1:OBrI6U8IpkC

Score
7/10

Malware Config

Targets

    • Target

      01c07d09ff212f857e96c20e57e4b4fc_JaffaCakes118

    • Size

      208KB

    • MD5

      01c07d09ff212f857e96c20e57e4b4fc

    • SHA1

      641f73b9004808f62c308c634993ed4137cee914

    • SHA256

      21579b6c8c0f5588ab7c20813f1fb0ba52e9a1647733456a39529327c45af8ed

    • SHA512

      8ddc52aa7fc4e31f335ae03d7caca969961efe66cd4253eb02ba495e737d0b59854ba8db123bc3b316cde8f00b3de185120a22d259d3484f3e100a4ea67066d1

    • SSDEEP

      6144:arYTgEMnRNL+I3YHBC/vMYRbbdfHKpkEj1:OBrI6U8IpkC

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks