General

  • Target

    05c2b60ebbdb310855d7f5c3f6d3e9e4_JaffaCakes118

  • Size

    155KB

  • Sample

    240620-n3ktdawcpe

  • MD5

    05c2b60ebbdb310855d7f5c3f6d3e9e4

  • SHA1

    830bd8f65780f629f942c6730ca0e8abb53a22b3

  • SHA256

    33cfba988c9cbbcb1f65079b2ff79c335b5167e85a512c4ffc7e0b1693710b70

  • SHA512

    35d60d2473849f999d9c96621c2f0cc3d73a31e738352ac7c564c52ed2de59b6a1570a5b4720f25e02c50adb63a058cfdc269c1b62af6341831720513736c85a

  • SSDEEP

    3072:bxDQEATkeg5p61HONEpeBOR5OE1EM2jASY1atZgn37zpnop2WtXvs3RUA:bBEQ5owGey92NgvpnoJtEhU

Score
7/10

Malware Config

Targets

    • Target

      05c2b60ebbdb310855d7f5c3f6d3e9e4_JaffaCakes118

    • Size

      155KB

    • MD5

      05c2b60ebbdb310855d7f5c3f6d3e9e4

    • SHA1

      830bd8f65780f629f942c6730ca0e8abb53a22b3

    • SHA256

      33cfba988c9cbbcb1f65079b2ff79c335b5167e85a512c4ffc7e0b1693710b70

    • SHA512

      35d60d2473849f999d9c96621c2f0cc3d73a31e738352ac7c564c52ed2de59b6a1570a5b4720f25e02c50adb63a058cfdc269c1b62af6341831720513736c85a

    • SSDEEP

      3072:bxDQEATkeg5p61HONEpeBOR5OE1EM2jASY1atZgn37zpnop2WtXvs3RUA:bBEQ5owGey92NgvpnoJtEhU

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks