General

  • Target

    045b7729afb05e480e7ddedfe255872a_JaffaCakes118

  • Size

    32KB

  • Sample

    240620-kdnl7axhlb

  • MD5

    045b7729afb05e480e7ddedfe255872a

  • SHA1

    b68205d55ec800b7dd3be5e6052dfa2a5883d254

  • SHA256

    f4b32e0916842aabc3117b6e011a7b98147d88b7c2c6c03b96eb783252763cc9

  • SHA512

    4b73911e34e94bd42b65f48a04f94d1be6e87686cab1cb8914910a0b2853c3228c732c16dd063c35232d8d5acd00a184f982e7380b5f7b52f95896e57b03aaa0

  • SSDEEP

    384:P2qEI8z8v/EW+i2d/kcsO+L/3n9+23b8+HQTcPPdULQwg5yGHbE3Vegl8pTjiJ1n:PRsgx+CcJSfn9L8+HAeVyK4lJlFPR/

Score
7/10

Malware Config

Targets

    • Target

      045b7729afb05e480e7ddedfe255872a_JaffaCakes118

    • Size

      32KB

    • MD5

      045b7729afb05e480e7ddedfe255872a

    • SHA1

      b68205d55ec800b7dd3be5e6052dfa2a5883d254

    • SHA256

      f4b32e0916842aabc3117b6e011a7b98147d88b7c2c6c03b96eb783252763cc9

    • SHA512

      4b73911e34e94bd42b65f48a04f94d1be6e87686cab1cb8914910a0b2853c3228c732c16dd063c35232d8d5acd00a184f982e7380b5f7b52f95896e57b03aaa0

    • SSDEEP

      384:P2qEI8z8v/EW+i2d/kcsO+L/3n9+23b8+HQTcPPdULQwg5yGHbE3Vegl8pTjiJ1n:PRsgx+CcJSfn9L8+HAeVyK4lJlFPR/

    Score
    7/10
    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks