General

  • Target

    b772a91ce22b949e8c352136d47241d7_JaffaCakes118

  • Size

    1.9MB

  • Sample

    240822-nh42hsthpb

  • MD5

    b772a91ce22b949e8c352136d47241d7

  • SHA1

    ac94801b0fcc999238ff4129625af211416863cf

  • SHA256

    9372758c6185516dbcf0a7e60372139f147bea6e38f5d66a764ed3b04b54d19f

  • SHA512

    0f41055a8fb9e4056b033b95ac4e612840fb7dc15fa578322864f8e321203721115e3c3b2e46b769c2a9bad08f52511396c80d2934a31f0a27479296c0223a69

  • SSDEEP

    49152:ElO7a65tpLMMn2EW9dCLEVm00atVBuhHKf:ES7p5eUEE0LtvTf

Score
7/10

Malware Config

Targets

    • Target

      b772a91ce22b949e8c352136d47241d7_JaffaCakes118

    • Size

      1.9MB

    • MD5

      b772a91ce22b949e8c352136d47241d7

    • SHA1

      ac94801b0fcc999238ff4129625af211416863cf

    • SHA256

      9372758c6185516dbcf0a7e60372139f147bea6e38f5d66a764ed3b04b54d19f

    • SHA512

      0f41055a8fb9e4056b033b95ac4e612840fb7dc15fa578322864f8e321203721115e3c3b2e46b769c2a9bad08f52511396c80d2934a31f0a27479296c0223a69

    • SSDEEP

      49152:ElO7a65tpLMMn2EW9dCLEVm00atVBuhHKf:ES7p5eUEE0LtvTf

    Score
    7/10
    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks