General

  • Target

    7013c7cf84eea77f1730347bbf04392a_JaffaCakes118

  • Size

    3.5MB

  • Sample

    240524-2zmqfsee52

  • MD5

    7013c7cf84eea77f1730347bbf04392a

  • SHA1

    380520207c76a1d2b51fc94988ed8f04b8724165

  • SHA256

    c20ad4c70a4ced174b391e8beef2fd35f519986f25034d15f4aa0e02c0cad315

  • SHA512

    b576b8d4565c25f23230f8dd7f9337af4010b690ca0f6ead3ee275a61032bed935b6728c773598dda1dcfd37a43d79228715991552298abeac991a48b680096f

  • SSDEEP

    98304:k3bobVkwiXFlJboUaQXK1XR0ZNSHm8GeRLfWFZzT:2beirfa1GZN+PhLIZ3

Malware Config

Targets

    • Target

      7013c7cf84eea77f1730347bbf04392a_JaffaCakes118

    • Size

      3.5MB

    • MD5

      7013c7cf84eea77f1730347bbf04392a

    • SHA1

      380520207c76a1d2b51fc94988ed8f04b8724165

    • SHA256

      c20ad4c70a4ced174b391e8beef2fd35f519986f25034d15f4aa0e02c0cad315

    • SHA512

      b576b8d4565c25f23230f8dd7f9337af4010b690ca0f6ead3ee275a61032bed935b6728c773598dda1dcfd37a43d79228715991552298abeac991a48b680096f

    • SSDEEP

      98304:k3bobVkwiXFlJboUaQXK1XR0ZNSHm8GeRLfWFZzT:2beirfa1GZN+PhLIZ3

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks system information in the registry

      System information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v15

Tasks