General

  • Target

    c12113870bc359efa64dd746507caf84_JaffaCakes118

  • Size

    86KB

  • Sample

    240825-twpfwavelm

  • MD5

    c12113870bc359efa64dd746507caf84

  • SHA1

    2e3beb8b67369fbb7c7e3c89c31aaa95f3443ade

  • SHA256

    1da8466714bb0c74f56dbc98f1b096f339a1ca1173998aa09fccf016a1af0dcd

  • SHA512

    080a911a3004672b347f61cd5563095002c1396af3c549c94067b79d1fe2d593f0ab22fdb52c102e0e9f9fbdc73a185b9e4ee994563c196fbdd706127b8c2613

  • SSDEEP

    1536:TSk3iCuIBFriPIFSyUWNEz+3Ap22/M0n44s5AzuaX9PZe+UgEcx6EOug83rH2T0Q:TSeriPIF9UWNEz+3Ap22/M0n44s5Azu5

Malware Config

Targets

    • Target

      c12113870bc359efa64dd746507caf84_JaffaCakes118

    • Size

      86KB

    • MD5

      c12113870bc359efa64dd746507caf84

    • SHA1

      2e3beb8b67369fbb7c7e3c89c31aaa95f3443ade

    • SHA256

      1da8466714bb0c74f56dbc98f1b096f339a1ca1173998aa09fccf016a1af0dcd

    • SHA512

      080a911a3004672b347f61cd5563095002c1396af3c549c94067b79d1fe2d593f0ab22fdb52c102e0e9f9fbdc73a185b9e4ee994563c196fbdd706127b8c2613

    • SSDEEP

      1536:TSk3iCuIBFriPIFSyUWNEz+3Ap22/M0n44s5AzuaX9PZe+UgEcx6EOug83rH2T0Q:TSeriPIF9UWNEz+3Ap22/M0n44s5Azu5

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks