General

  • Target

    b63d54e07006ebe38eea37235d32e808_JaffaCakes118

  • Size

    468KB

  • Sample

    240822-efj4ws1arq

  • MD5

    b63d54e07006ebe38eea37235d32e808

  • SHA1

    33843a516cbb96f43e9474d7163814abdf2b358e

  • SHA256

    21185c3feac1ceee991951fbb24dc1deee4b43b33aa9bb67b62832d3392d003a

  • SHA512

    cf2146727afa578423e35b0c47902233055c6b1e817cf5e2562191d96e1be555111e12149662ba7c78205c1b71b6fa734c378bb870b2c8db945ac2d4d8642e9c

  • SSDEEP

    6144:lKRlfdLQsZ8KRlfddo/arUr4WqivIgAvlc0KZ+YFPi+Y5AYuHGFf4YDybho5F0UF:M1L41UGRGF4YDy5k5+y

Score
10/10

Malware Config

Extracted

Credentials

  • Protocol:
    smtp
  • Host:
    smtp.gmail.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    13411341

Targets

    • Target

      b63d54e07006ebe38eea37235d32e808_JaffaCakes118

    • Size

      468KB

    • MD5

      b63d54e07006ebe38eea37235d32e808

    • SHA1

      33843a516cbb96f43e9474d7163814abdf2b358e

    • SHA256

      21185c3feac1ceee991951fbb24dc1deee4b43b33aa9bb67b62832d3392d003a

    • SHA512

      cf2146727afa578423e35b0c47902233055c6b1e817cf5e2562191d96e1be555111e12149662ba7c78205c1b71b6fa734c378bb870b2c8db945ac2d4d8642e9c

    • SSDEEP

      6144:lKRlfdLQsZ8KRlfddo/arUr4WqivIgAvlc0KZ+YFPi+Y5AYuHGFf4YDybho5F0UF:M1L41UGRGF4YDy5k5+y

    Score
    10/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks