General

  • Target

    068263a4c4ea86c1040ba533287e1330_JaffaCakes118

  • Size

    39.4MB

  • Sample

    240429-bs5dtaef3z

  • MD5

    068263a4c4ea86c1040ba533287e1330

  • SHA1

    b463080e1e31380a27277ccafeb052edc88d9ced

  • SHA256

    2ee26059e7da46a1d1a568ee39394c6ea53f0e427eea18055bf1889f12bc2f77

  • SHA512

    5a8abf9f933cc0386dc7899ec21e6061f3fd4499de3ea195ab67f4cefd6c6422f4777291f5be87573308e3afcc453c593a286e577766da1f0087a5c858174cd1

  • SSDEEP

    786432:xkxc4BiiqqeuC9H607Yd0FPAwt3f3DXXo1wg+37TLYVzvWVHI:xsdqqez9H7wWPRt3f3bXo1wNC

Malware Config

Targets

    • Target

      068263a4c4ea86c1040ba533287e1330_JaffaCakes118

    • Size

      39.4MB

    • MD5

      068263a4c4ea86c1040ba533287e1330

    • SHA1

      b463080e1e31380a27277ccafeb052edc88d9ced

    • SHA256

      2ee26059e7da46a1d1a568ee39394c6ea53f0e427eea18055bf1889f12bc2f77

    • SHA512

      5a8abf9f933cc0386dc7899ec21e6061f3fd4499de3ea195ab67f4cefd6c6422f4777291f5be87573308e3afcc453c593a286e577766da1f0087a5c858174cd1

    • SSDEEP

      786432:xkxc4BiiqqeuC9H607Yd0FPAwt3f3DXXo1wg+37TLYVzvWVHI:xsdqqez9H7wWPRt3f3bXo1wNC

    • Modifies firewall policy service

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Modifies Windows Firewall

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks