General

  • Target

    a6d586ca114fc8475d6393d91407bbb8_JaffaCakes118

  • Size

    184KB

  • Sample

    240613-15twaasdlg

  • MD5

    a6d586ca114fc8475d6393d91407bbb8

  • SHA1

    49500afbbb060785d40ef599136c4d4eaa998406

  • SHA256

    dde813f3141583c296153f77d4f395b1e99cd9cdad115da3c56ba9a79831bb53

  • SHA512

    cfc7f2d4b82e4e329dbb166161596afe036083f558a370bd269a801248d886f8492abedd15c22522803923958e5d633793eb75987a5b1ab387c06ca59cf098bf

  • SSDEEP

    3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3qg:/7BSH8zUB+nGESaaRvoB7FJNndnjg

Score
8/10

Malware Config

Targets

    • Target

      a6d586ca114fc8475d6393d91407bbb8_JaffaCakes118

    • Size

      184KB

    • MD5

      a6d586ca114fc8475d6393d91407bbb8

    • SHA1

      49500afbbb060785d40ef599136c4d4eaa998406

    • SHA256

      dde813f3141583c296153f77d4f395b1e99cd9cdad115da3c56ba9a79831bb53

    • SHA512

      cfc7f2d4b82e4e329dbb166161596afe036083f558a370bd269a801248d886f8492abedd15c22522803923958e5d633793eb75987a5b1ab387c06ca59cf098bf

    • SSDEEP

      3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3qg:/7BSH8zUB+nGESaaRvoB7FJNndnjg

    Score
    8/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks