General

  • Target

    eab8945a8556726e6844c40193db8b15_JaffaCakes118

  • Size

    34KB

  • Sample

    240919-grslhsvapp

  • MD5

    eab8945a8556726e6844c40193db8b15

  • SHA1

    1448b86e0b928d3580ab88c8fc8a53de50aa64b4

  • SHA256

    f5d720587c4e9e7ffc7f915c86d7f4b4b190bf76350854f562be73817a88bf27

  • SHA512

    4dac6c14204cdb116e39956e26d3d699aa7833f855e0905e9968ae54a6cd61d0e4f9de98f96f319451138fa01b8a922205182b87a505da166fc3493b197d8ff8

  • SSDEEP

    768:sbd6OZHZQPs7EC5kcgw3QJPDymTonVSEYa78iomj:sbx+U55kiUYnwEGiDj

Malware Config

Targets

    • Target

      eab8945a8556726e6844c40193db8b15_JaffaCakes118

    • Size

      34KB

    • MD5

      eab8945a8556726e6844c40193db8b15

    • SHA1

      1448b86e0b928d3580ab88c8fc8a53de50aa64b4

    • SHA256

      f5d720587c4e9e7ffc7f915c86d7f4b4b190bf76350854f562be73817a88bf27

    • SHA512

      4dac6c14204cdb116e39956e26d3d699aa7833f855e0905e9968ae54a6cd61d0e4f9de98f96f319451138fa01b8a922205182b87a505da166fc3493b197d8ff8

    • SSDEEP

      768:sbd6OZHZQPs7EC5kcgw3QJPDymTonVSEYa78iomj:sbx+U55kiUYnwEGiDj

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks