General

  • Target

    5559cbb32ada575e19af6c7d1f6b460c_JaffaCakes118

  • Size

    544KB

  • Sample

    240518-shg9zahc4s

  • MD5

    5559cbb32ada575e19af6c7d1f6b460c

  • SHA1

    39c27877aa3b9b904d791eaa79e22718d35308d7

  • SHA256

    c8d2e1a43f6e835d3300599a94a75f11f20d3e62f4360b5b8c9f6f42fd3ad267

  • SHA512

    6de7d4aba57286465e02258a860b613a941e3073403d89b92ae0b1fe8b3ac9c999d0834fab13b763ae4fd998564ee1cdfe7fa430bc213f03951ffcab82465e12

  • SSDEEP

    6144:vvXK1qoTANFCR5ZDnWVwZErQ9gX1SjuUFuSS2DeWiQGzqQQnE+RJZF:nK8ocNIR5dnWV/FjareW/6HkbLF

Score
10/10

Malware Config

Targets

    • Target

      5559cbb32ada575e19af6c7d1f6b460c_JaffaCakes118

    • Size

      544KB

    • MD5

      5559cbb32ada575e19af6c7d1f6b460c

    • SHA1

      39c27877aa3b9b904d791eaa79e22718d35308d7

    • SHA256

      c8d2e1a43f6e835d3300599a94a75f11f20d3e62f4360b5b8c9f6f42fd3ad267

    • SHA512

      6de7d4aba57286465e02258a860b613a941e3073403d89b92ae0b1fe8b3ac9c999d0834fab13b763ae4fd998564ee1cdfe7fa430bc213f03951ffcab82465e12

    • SSDEEP

      6144:vvXK1qoTANFCR5ZDnWVwZErQ9gX1SjuUFuSS2DeWiQGzqQQnE+RJZF:nK8ocNIR5dnWV/FjareW/6HkbLF

    Score
    10/10
    • Remcos

      Remcos is a closed-source remote control and surveillance software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks