General

  • Target

    34fe5284eba4466c6ab483168aa0e420_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240511-rkbpjaea66

  • MD5

    34fe5284eba4466c6ab483168aa0e420

  • SHA1

    6cc5c348d0e3231b3d7a15045123b1c2be2b127e

  • SHA256

    e38d44886a37f06ccc3b2dee2e063a521999fb207ec8ad519f099581ca80dd58

  • SHA512

    f899d1bd825a21d7470230c42ac2230863580e7ddbd49187ce5d3a0f533db7a4fb2737d8938984f5e1378c4d83241fc8f708bf6f08a9c012704fd53f8f603a00

  • SSDEEP

    24576:PSs/GDP8xXMXe3W/z+Fw/1hbV5Y2TTDxwO9rUT:PSs/2PHsoq2XrN3DlU

Score
10/10

Malware Config

Targets

    • Target

      34fe5284eba4466c6ab483168aa0e420_JaffaCakes118

    • Size

      1.1MB

    • MD5

      34fe5284eba4466c6ab483168aa0e420

    • SHA1

      6cc5c348d0e3231b3d7a15045123b1c2be2b127e

    • SHA256

      e38d44886a37f06ccc3b2dee2e063a521999fb207ec8ad519f099581ca80dd58

    • SHA512

      f899d1bd825a21d7470230c42ac2230863580e7ddbd49187ce5d3a0f533db7a4fb2737d8938984f5e1378c4d83241fc8f708bf6f08a9c012704fd53f8f603a00

    • SSDEEP

      24576:PSs/GDP8xXMXe3W/z+Fw/1hbV5Y2TTDxwO9rUT:PSs/2PHsoq2XrN3DlU

    Score
    10/10
    • Remcos

      Remcos is a closed-source remote control and surveillance software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks