General

  • Target

    696869f33a53d9bce7d99b783c81b013_JaffaCakes118

  • Size

    555KB

  • Sample

    240523-cmzrtaac74

  • MD5

    696869f33a53d9bce7d99b783c81b013

  • SHA1

    a5d730bf9de655b5fd5e52fb722f80c159df240d

  • SHA256

    1302f341df64b65b1e9f3b1ec92ad1b980562cc803943ed52070e98289b649d6

  • SHA512

    aba70ecfd095a1d5101dd905c02c8a06a6d53031b3e5d0801a94b9b47ed957e9a5263d5dea09039684f1bf16163cf1f757717d605b22090a869cd6e8e9d956f9

  • SSDEEP

    12288:jJfn9d2yFOpE0LCihZgqQZH6l2WiKhp68:dfn9d2yME0+izgNZHiikp68

Score
8/10

Malware Config

Targets

    • Target

      696869f33a53d9bce7d99b783c81b013_JaffaCakes118

    • Size

      555KB

    • MD5

      696869f33a53d9bce7d99b783c81b013

    • SHA1

      a5d730bf9de655b5fd5e52fb722f80c159df240d

    • SHA256

      1302f341df64b65b1e9f3b1ec92ad1b980562cc803943ed52070e98289b649d6

    • SHA512

      aba70ecfd095a1d5101dd905c02c8a06a6d53031b3e5d0801a94b9b47ed957e9a5263d5dea09039684f1bf16163cf1f757717d605b22090a869cd6e8e9d956f9

    • SSDEEP

      12288:jJfn9d2yFOpE0LCihZgqQZH6l2WiKhp68:dfn9d2yME0+izgNZHiikp68

    Score
    8/10
    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Tasks