General

  • Target

    c07325405e090ac0f0c5d3164c01e22b_JaffaCakes118

  • Size

    132KB

  • Sample

    240825-ljsc1ayfrj

  • MD5

    c07325405e090ac0f0c5d3164c01e22b

  • SHA1

    4936a4e8c3aafc0c640de987068c3fab10e8bea3

  • SHA256

    e61c5892d991460798434e55f72cfa7dff65822b4cfac6789a03ba9ee92bc5a7

  • SHA512

    b7d84cfae93765d8f9565606671638fbe27b3b33e2e36a202ff35fb07700071ea7554f0de92a457940a3bee7e7a5e3428062e71fc9694ca6167590a222d26ab6

  • SSDEEP

    1536:l6xPueTIXQXFixXVG4e2JLBJ3Ue05znybzPe9jRwo7JaS1:queTIXEFixFG4e1ybGtwQL

Malware Config

Targets

    • Target

      c07325405e090ac0f0c5d3164c01e22b_JaffaCakes118

    • Size

      132KB

    • MD5

      c07325405e090ac0f0c5d3164c01e22b

    • SHA1

      4936a4e8c3aafc0c640de987068c3fab10e8bea3

    • SHA256

      e61c5892d991460798434e55f72cfa7dff65822b4cfac6789a03ba9ee92bc5a7

    • SHA512

      b7d84cfae93765d8f9565606671638fbe27b3b33e2e36a202ff35fb07700071ea7554f0de92a457940a3bee7e7a5e3428062e71fc9694ca6167590a222d26ab6

    • SSDEEP

      1536:l6xPueTIXQXFixXVG4e2JLBJ3Ue05znybzPe9jRwo7JaS1:queTIXEFixFG4e1ybGtwQL

    • Modifies visiblity of hidden/system files in Explorer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks