General

  • Target

    0f54af2eb4f2fe2288964d4c86ba3b2b_JaffaCakes118

  • Size

    450KB

  • Sample

    240625-ym2gassbmm

  • MD5

    0f54af2eb4f2fe2288964d4c86ba3b2b

  • SHA1

    3acd41e2cf37512319bce127a2f033e04e261242

  • SHA256

    913ebc4dc55802714c4f110e1630d990e5318deded8496dbcdc2225c23354fc3

  • SHA512

    3adbe256d306e2b4246a986c04a1e961a476803c7d30433e9030377a94f871403a0529b72d9366f5ff8ee81f631bbd5c3345cea0e2c29043f574f07cb41a306a

  • SSDEEP

    12288:/j9E1EkI9EglDFCoINhC/PwHpFzcSQQFyIBkiqiXMRC:/5E1B8lpp0hqYHpZcSQQiiPXL

Score
8/10

Malware Config

Targets

    • Target

      0f54af2eb4f2fe2288964d4c86ba3b2b_JaffaCakes118

    • Size

      450KB

    • MD5

      0f54af2eb4f2fe2288964d4c86ba3b2b

    • SHA1

      3acd41e2cf37512319bce127a2f033e04e261242

    • SHA256

      913ebc4dc55802714c4f110e1630d990e5318deded8496dbcdc2225c23354fc3

    • SHA512

      3adbe256d306e2b4246a986c04a1e961a476803c7d30433e9030377a94f871403a0529b72d9366f5ff8ee81f631bbd5c3345cea0e2c29043f574f07cb41a306a

    • SSDEEP

      12288:/j9E1EkI9EglDFCoINhC/PwHpFzcSQQFyIBkiqiXMRC:/5E1B8lpp0hqYHpZcSQQiiPXL

    Score
    8/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks