General

  • Target

    d5b5fe4213135bef3c4aea03ae22b448_JaffaCakes118

  • Size

    31KB

  • Sample

    240909-fzdlwswcpe

  • MD5

    d5b5fe4213135bef3c4aea03ae22b448

  • SHA1

    4c0a89a939753931fbb27f285f58fd47123804c5

  • SHA256

    51c9f0473310a62085996f7a9ba3c1d3392b72036f87405c1c9db3b28299401f

  • SHA512

    8fa503063c1fe38ea6ce0bce0c8959516d14f1a31a3ec9edf54035437d0ec42b8c65baad58809eb4f5fac279bf214a37c5336edfa7d725cdf5968fe53d3a53ed

  • SSDEEP

    768:q9JBtxmfDZwQ3haRhrNvfYg5WnoQYE7GfQQS:yUf2Q3gLYdoQYVfB

Malware Config

Targets

    • Target

      d5b5fe4213135bef3c4aea03ae22b448_JaffaCakes118

    • Size

      31KB

    • MD5

      d5b5fe4213135bef3c4aea03ae22b448

    • SHA1

      4c0a89a939753931fbb27f285f58fd47123804c5

    • SHA256

      51c9f0473310a62085996f7a9ba3c1d3392b72036f87405c1c9db3b28299401f

    • SHA512

      8fa503063c1fe38ea6ce0bce0c8959516d14f1a31a3ec9edf54035437d0ec42b8c65baad58809eb4f5fac279bf214a37c5336edfa7d725cdf5968fe53d3a53ed

    • SSDEEP

      768:q9JBtxmfDZwQ3haRhrNvfYg5WnoQYE7GfQQS:yUf2Q3gLYdoQYVfB

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Network Share Discovery

      Attempt to gather information on host network.

MITRE ATT&CK Enterprise v15

Tasks