General

  • Target

    9783960bd13fc9f6e266f220c5a174aa_JaffaCakes118

  • Size

    3.5MB

  • Sample

    240605-jkb2asag54

  • MD5

    9783960bd13fc9f6e266f220c5a174aa

  • SHA1

    6a483c098d04152ed62b4e53600e819eaad163b4

  • SHA256

    98b7ae6e91fe56a7597d1559967fad5ecc42e46c5021587dfa4be6c444412514

  • SHA512

    2f808cbca7eeeaaac626d7519caad4ea407345b542c8a249179567d4da0c54cd8a05f6dd6dc9179a51ad23f4ce456490f212eea6c37dff6376ba8bd5884ae606

  • SSDEEP

    98304:X3bobVkwiXFlJboUaQXK1XR0ZNSHm8GeRLfWFZzl:Hbeirfa1GZN+PhLIZZ

Malware Config

Targets

    • Target

      9783960bd13fc9f6e266f220c5a174aa_JaffaCakes118

    • Size

      3.5MB

    • MD5

      9783960bd13fc9f6e266f220c5a174aa

    • SHA1

      6a483c098d04152ed62b4e53600e819eaad163b4

    • SHA256

      98b7ae6e91fe56a7597d1559967fad5ecc42e46c5021587dfa4be6c444412514

    • SHA512

      2f808cbca7eeeaaac626d7519caad4ea407345b542c8a249179567d4da0c54cd8a05f6dd6dc9179a51ad23f4ce456490f212eea6c37dff6376ba8bd5884ae606

    • SSDEEP

      98304:X3bobVkwiXFlJboUaQXK1XR0ZNSHm8GeRLfWFZzl:Hbeirfa1GZN+PhLIZZ

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks system information in the registry

      System information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v15

Tasks