General

  • Target

    6926669dedeb8045cd2d476f2b566e6c_JaffaCakes118

  • Size

    3.6MB

  • Sample

    240523-at49rseg8s

  • MD5

    6926669dedeb8045cd2d476f2b566e6c

  • SHA1

    df914c580b643182a19fee80b32867a6f7fcb061

  • SHA256

    73c0e632a867e3f3ae14e1e3d6d654768393e10b9edfec58bf702cd29fb8c9b5

  • SHA512

    25262446dd340a9b15062af2254da690deca671f06ad4ad0a18184bc92287225d2d8af355e53625d77d337e27fff57f184b551d07716083e2dea86779aefae98

  • SSDEEP

    98304:M5ImrvzyuJwS1mt3XjRzHesy5PYP8PCHR9FhIhizpl3ApZZ7qPh:BOyuJwSwtDRzHcz6hIMzplwpUh

Score
7/10

Malware Config

Targets

    • Target

      6926669dedeb8045cd2d476f2b566e6c_JaffaCakes118

    • Size

      3.6MB

    • MD5

      6926669dedeb8045cd2d476f2b566e6c

    • SHA1

      df914c580b643182a19fee80b32867a6f7fcb061

    • SHA256

      73c0e632a867e3f3ae14e1e3d6d654768393e10b9edfec58bf702cd29fb8c9b5

    • SHA512

      25262446dd340a9b15062af2254da690deca671f06ad4ad0a18184bc92287225d2d8af355e53625d77d337e27fff57f184b551d07716083e2dea86779aefae98

    • SSDEEP

      98304:M5ImrvzyuJwS1mt3XjRzHesy5PYP8PCHR9FhIhizpl3ApZZ7qPh:BOyuJwSwtDRzHcz6hIMzplwpUh

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks system information in the registry

      System information is often read in order to detect sandboxing environments.

MITRE ATT&CK Matrix ATT&CK v13

Execution

Scheduled Task/Job

1
T1053

Persistence

Scheduled Task/Job

1
T1053

Privilege Escalation

Scheduled Task/Job

1
T1053

Discovery

Query Registry

2
T1012

System Information Discovery

3
T1082

Tasks