General

  • Target

    74219c84ea9a506ef78ecb950678643c_JaffaCakes118

  • Size

    396KB

  • Sample

    240726-p3qkasyelj

  • MD5

    74219c84ea9a506ef78ecb950678643c

  • SHA1

    ac590e33d210749b37f9e6e3655f63d182b67979

  • SHA256

    746ddba93b6e86416596de3ee8c863c5f9d4a4547c4a1062045d25ad36b9c7c2

  • SHA512

    e136faaa304d4ec971b67ecb74d9dcda378d82338c6608ac001d71483c5a8dcf98cc456ae952417e8532369e45b0ec39567650cdb6e38ddf28557cdc18929cb2

  • SSDEEP

    6144:WAYJZgInUcGF0HDifzhwJRn7N3NpSYjNeClARzwp:WXJqIR/HWQ3eGNY

Score
7/10

Malware Config

Targets

    • Target

      74219c84ea9a506ef78ecb950678643c_JaffaCakes118

    • Size

      396KB

    • MD5

      74219c84ea9a506ef78ecb950678643c

    • SHA1

      ac590e33d210749b37f9e6e3655f63d182b67979

    • SHA256

      746ddba93b6e86416596de3ee8c863c5f9d4a4547c4a1062045d25ad36b9c7c2

    • SHA512

      e136faaa304d4ec971b67ecb74d9dcda378d82338c6608ac001d71483c5a8dcf98cc456ae952417e8532369e45b0ec39567650cdb6e38ddf28557cdc18929cb2

    • SSDEEP

      6144:WAYJZgInUcGF0HDifzhwJRn7N3NpSYjNeClARzwp:WXJqIR/HWQ3eGNY

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks