General

  • Target

    7797b748f17f7e4ea1430adcaa7af669_JaffaCakes118

  • Size

    859KB

  • Sample

    240727-kyh77ssaqe

  • MD5

    7797b748f17f7e4ea1430adcaa7af669

  • SHA1

    9381d14c12cda0ebb307768148137e2c7a976b18

  • SHA256

    2b06a2e93c034c7ae4e2e9bfd5f6cb3d8eb6fae23ff4d23ee536a60656416f9c

  • SHA512

    2f98c6ce94cc9f0693f66fb1a1b428d6440b7a60ac6293b99ff5a87e5b8bcace8ca374d077b262233b3dc193acc71f0443370b85d07984d2f61223c3befd2eff

  • SSDEEP

    24576:LQw+bvU1bySV2m75wNIa6qDtG4a6q2ZhITe6Acr:DYUAq5Wb60q2HIqMr

Malware Config

Targets

    • Target

      7797b748f17f7e4ea1430adcaa7af669_JaffaCakes118

    • Size

      859KB

    • MD5

      7797b748f17f7e4ea1430adcaa7af669

    • SHA1

      9381d14c12cda0ebb307768148137e2c7a976b18

    • SHA256

      2b06a2e93c034c7ae4e2e9bfd5f6cb3d8eb6fae23ff4d23ee536a60656416f9c

    • SHA512

      2f98c6ce94cc9f0693f66fb1a1b428d6440b7a60ac6293b99ff5a87e5b8bcace8ca374d077b262233b3dc193acc71f0443370b85d07984d2f61223c3befd2eff

    • SSDEEP

      24576:LQw+bvU1bySV2m75wNIa6qDtG4a6q2ZhITe6Acr:DYUAq5Wb60q2HIqMr

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks