General

  • Target

    31645af73294b1734caf270574a06bf6_JaffaCakes118

  • Size

    35KB

  • Sample

    240709-wj59zaydjd

  • MD5

    31645af73294b1734caf270574a06bf6

  • SHA1

    eafb77943611e88c3ece9072db3d431175b52bfb

  • SHA256

    8db8012f8b083f77db7c0f761474cc470a289680198526cf1b1f563a12a4af52

  • SHA512

    e40c9c9524212c20ea0333fa3bc8ba0cca971f84b1e60021072192d89ceb074e6a37272a83b18dbdc65d056ea972ef6c10c40de3581c4a259f7747de2d042749

  • SSDEEP

    768:mzQYScGrIubHuYtvdxwYHw5FAe2QUncwxpJ:gQTIubHy5wQU1J

Score
10/10

Malware Config

Extracted

Credentials

  • Protocol:
    ftp
  • Host:
    ftp.tripod.com
  • Port:
    21
  • Username:
    onthelinux
  • Password:
    741852abc

Targets

    • Target

      31645af73294b1734caf270574a06bf6_JaffaCakes118

    • Size

      35KB

    • MD5

      31645af73294b1734caf270574a06bf6

    • SHA1

      eafb77943611e88c3ece9072db3d431175b52bfb

    • SHA256

      8db8012f8b083f77db7c0f761474cc470a289680198526cf1b1f563a12a4af52

    • SHA512

      e40c9c9524212c20ea0333fa3bc8ba0cca971f84b1e60021072192d89ceb074e6a37272a83b18dbdc65d056ea972ef6c10c40de3581c4a259f7747de2d042749

    • SSDEEP

      768:mzQYScGrIubHuYtvdxwYHw5FAe2QUncwxpJ:gQTIubHy5wQU1J

    Score
    10/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks