General

  • Target

    90e3b504130b31cb8a8d425aef8fac05_JaffaCakes118

  • Size

    408KB

  • Sample

    240603-hnbdhafd4w

  • MD5

    90e3b504130b31cb8a8d425aef8fac05

  • SHA1

    845676ed3d2b81ac5f3da6dfa2453b02c82b1c85

  • SHA256

    d535612ee4508a213ac0d81235dc826418ae81df3219dd305ddb52f55bfe9c48

  • SHA512

    93b79f7fbdaae067fd766f5a1e65ff926818daf3fdb792b6e97574a77d245c3906563ac08d74fcdf5085af6d073e260547d3bf34895b131f0a64ccdddb4a96c7

  • SSDEEP

    6144:ogWWWqe3nOj/Rv9qvrpzzK1lNcVGcSQtfwxwkF72FjaeeZREN3tQrZlt:2WWhnOjpEt6vcNWikF74+eeL5Z7

Malware Config

Targets

    • Target

      90e3b504130b31cb8a8d425aef8fac05_JaffaCakes118

    • Size

      408KB

    • MD5

      90e3b504130b31cb8a8d425aef8fac05

    • SHA1

      845676ed3d2b81ac5f3da6dfa2453b02c82b1c85

    • SHA256

      d535612ee4508a213ac0d81235dc826418ae81df3219dd305ddb52f55bfe9c48

    • SHA512

      93b79f7fbdaae067fd766f5a1e65ff926818daf3fdb792b6e97574a77d245c3906563ac08d74fcdf5085af6d073e260547d3bf34895b131f0a64ccdddb4a96c7

    • SSDEEP

      6144:ogWWWqe3nOj/Rv9qvrpzzK1lNcVGcSQtfwxwkF72FjaeeZREN3tQrZlt:2WWhnOjpEt6vcNWikF74+eeL5Z7

    • Modifies Windows Defender Real-time Protection settings

    • Stops running service(s)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks