General

  • Target

    8c29162a35c887542da910569bc74314_JaffaCakes118

  • Size

    6.5MB

  • Sample

    240811-11ldca1bkk

  • MD5

    8c29162a35c887542da910569bc74314

  • SHA1

    33ae196bddeeb1e09f0ecd7fedb0746b40c9ac57

  • SHA256

    35fb32dd4a994d171a52ecb3863c9f7f63ec4c46ea7360f6f5d404ad03185bb2

  • SHA512

    d693b1f072774abf10e325707f13f17a4e09883e96e1a54daecd2eee24206c42bfa14b76460e48a3ba2367cce426e6bb88e1a6afde685a6b73fe007c01498207

  • SSDEEP

    196608:HGDISTVy4uQCrCqKfgGkDItMVLFDgNe64ETDHFqdiN:HGLTkovIGkoMlF9ElqW

Malware Config

Targets

    • Target

      8c29162a35c887542da910569bc74314_JaffaCakes118

    • Size

      6.5MB

    • MD5

      8c29162a35c887542da910569bc74314

    • SHA1

      33ae196bddeeb1e09f0ecd7fedb0746b40c9ac57

    • SHA256

      35fb32dd4a994d171a52ecb3863c9f7f63ec4c46ea7360f6f5d404ad03185bb2

    • SHA512

      d693b1f072774abf10e325707f13f17a4e09883e96e1a54daecd2eee24206c42bfa14b76460e48a3ba2367cce426e6bb88e1a6afde685a6b73fe007c01498207

    • SSDEEP

      196608:HGDISTVy4uQCrCqKfgGkDItMVLFDgNe64ETDHFqdiN:HGLTkovIGkoMlF9ElqW

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks