General

  • Target

    8a22fb4a108158be1b41b22033dfb18a_JaffaCakes118

  • Size

    490KB

  • Sample

    240811-m933vs1drh

  • MD5

    8a22fb4a108158be1b41b22033dfb18a

  • SHA1

    388e3270d09fb6278dd5bed0a0c639f2cda20fbc

  • SHA256

    46ba6ff4dc49b5f6393d204cc2f999704c1d1719e6173f71b6f74fedba90c7fa

  • SHA512

    48ea965153444d6a8e2bbc347231bc135602d6fe9fe27140da75ff32060ceb02e014ed8806bf3fc0848fa56d9a0e0cdf1aba9859c6b8ffbf73927eb7d3019580

  • SSDEEP

    12288:myZB2GYrdWrXusDCanzgCZpTxf9MzpwExcEPBBmkT:m4glrEDD1zgCPxGHg4

Malware Config

Targets

    • Target

      8a22fb4a108158be1b41b22033dfb18a_JaffaCakes118

    • Size

      490KB

    • MD5

      8a22fb4a108158be1b41b22033dfb18a

    • SHA1

      388e3270d09fb6278dd5bed0a0c639f2cda20fbc

    • SHA256

      46ba6ff4dc49b5f6393d204cc2f999704c1d1719e6173f71b6f74fedba90c7fa

    • SHA512

      48ea965153444d6a8e2bbc347231bc135602d6fe9fe27140da75ff32060ceb02e014ed8806bf3fc0848fa56d9a0e0cdf1aba9859c6b8ffbf73927eb7d3019580

    • SSDEEP

      12288:myZB2GYrdWrXusDCanzgCZpTxf9MzpwExcEPBBmkT:m4glrEDD1zgCPxGHg4

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops desktop.ini file(s)

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks