General

  • Target

    697baeba096d13cf3c176d5b3d5be2c4_JaffaCakes118

  • Size

    136KB

  • Sample

    240723-31vywszarh

  • MD5

    697baeba096d13cf3c176d5b3d5be2c4

  • SHA1

    e1a50b4f1a6012416f9eef8fa22bc83dc76c375b

  • SHA256

    50387833333ff79ff8eae2fb54c60af5f5a3e5c78bd3211133fd934adc72b320

  • SHA512

    87410b6974f41c731b186e8a9000ef5adf5eb9a0c90b0d6b7179ed8450e0c965f7c150b883d0c3e03666b4df726fccc20a4075070a82d2f6357ac3e65634877d

  • SSDEEP

    1536:BiIXV9BV85nPn5Qa6NUbaxaZ65gX4Tv9u2y0aZAbs/nLgiow28fz+DliO3MxmPdD:7XVLVh7UbaxHgOg/n8if7hmFMWP

Malware Config

Targets

    • Target

      697baeba096d13cf3c176d5b3d5be2c4_JaffaCakes118

    • Size

      136KB

    • MD5

      697baeba096d13cf3c176d5b3d5be2c4

    • SHA1

      e1a50b4f1a6012416f9eef8fa22bc83dc76c375b

    • SHA256

      50387833333ff79ff8eae2fb54c60af5f5a3e5c78bd3211133fd934adc72b320

    • SHA512

      87410b6974f41c731b186e8a9000ef5adf5eb9a0c90b0d6b7179ed8450e0c965f7c150b883d0c3e03666b4df726fccc20a4075070a82d2f6357ac3e65634877d

    • SSDEEP

      1536:BiIXV9BV85nPn5Qa6NUbaxaZ65gX4Tv9u2y0aZAbs/nLgiow28fz+DliO3MxmPdD:7XVLVh7UbaxHgOg/n8if7hmFMWP

    • Modifies visiblity of hidden/system files in Explorer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks