General

  • Target

    d7557f26850945c0169ef1a1ff0c7890_JaffaCakes118

  • Size

    31KB

  • Sample

    240910-aq38asxfpq

  • MD5

    d7557f26850945c0169ef1a1ff0c7890

  • SHA1

    e2906ed40dda5e2a76b2cab13b2fef73d06c6ca8

  • SHA256

    a9077017d21f028cb423218fe7a215274266de2695ef1d8db333150525f4762e

  • SHA512

    99a4e96b3d22519cfe934f2156a344e6c632d1083e6613151d7b297177cd08753a2600e9bcbd253a63f504376f800114d8296ad467fad7b8a9ca4dd0be9b387e

  • SSDEEP

    768:iLATbo5e+DSZkhgXHQExse+ezT9EAvkVTenHcGS5:EATbE5x6XHbqez5vqenHo

Score
7/10

Malware Config

Targets

    • Target

      d7557f26850945c0169ef1a1ff0c7890_JaffaCakes118

    • Size

      31KB

    • MD5

      d7557f26850945c0169ef1a1ff0c7890

    • SHA1

      e2906ed40dda5e2a76b2cab13b2fef73d06c6ca8

    • SHA256

      a9077017d21f028cb423218fe7a215274266de2695ef1d8db333150525f4762e

    • SHA512

      99a4e96b3d22519cfe934f2156a344e6c632d1083e6613151d7b297177cd08753a2600e9bcbd253a63f504376f800114d8296ad467fad7b8a9ca4dd0be9b387e

    • SSDEEP

      768:iLATbo5e+DSZkhgXHQExse+ezT9EAvkVTenHcGS5:EATbE5x6XHbqez5vqenHo

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks