Resubmissions

21/05/2024, 09:09

240521-k4twwsfg38 7

General

  • Target

    62c01f1b2ac0a7bab6c3b50fd51e6a36_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240521-k4twwsfg38

  • MD5

    62c01f1b2ac0a7bab6c3b50fd51e6a36

  • SHA1

    cfc301a04b9a4ffeb0dc4578c1998a4eb4754f7b

  • SHA256

    c46a631f0bc82d8c2d46e9d8634cc50242987fa7749cac097439298d1d0c1d6e

  • SHA512

    6617b2723526a8f569d796352e21fb902d1db76dd3a3c6b6562915a7fb087b7e65871921fcdc97871b302d77efa0b60d63872bb0b8bae4a7d982486428cd43ab

  • SSDEEP

    24576:HRmJkcoQricOIQxiZY1iagI+bpJBIAkPcJCqbVvi1N:sJZoQrbTFZY1iagTpVkybVqT

Score
7/10

Malware Config

Targets

    • Target

      62c01f1b2ac0a7bab6c3b50fd51e6a36_JaffaCakes118

    • Size

      1.1MB

    • MD5

      62c01f1b2ac0a7bab6c3b50fd51e6a36

    • SHA1

      cfc301a04b9a4ffeb0dc4578c1998a4eb4754f7b

    • SHA256

      c46a631f0bc82d8c2d46e9d8634cc50242987fa7749cac097439298d1d0c1d6e

    • SHA512

      6617b2723526a8f569d796352e21fb902d1db76dd3a3c6b6562915a7fb087b7e65871921fcdc97871b302d77efa0b60d63872bb0b8bae4a7d982486428cd43ab

    • SSDEEP

      24576:HRmJkcoQricOIQxiZY1iagI+bpJBIAkPcJCqbVvi1N:sJZoQrbTFZY1iagTpVkybVqT

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

MITRE ATT&CK Enterprise v15

Tasks