General

  • Target

    ed8897bcabef3fc0ac9716a2658532e3_JaffaCakes118

  • Size

    269KB

  • Sample

    240920-n48a3avdrc

  • MD5

    ed8897bcabef3fc0ac9716a2658532e3

  • SHA1

    04c846d310b38382e4bc768d33e85a405b2f7afe

  • SHA256

    7f4090d1b5012cf6b70887896922b113c33ab07575d39f646981729fb5a766ea

  • SHA512

    3c5db0cbe00e376670dd2a437d32ae3d94f13ce453dc7c49d5467be4fc219d17583fcf5c866c3390121cf1711f92faedbe459fc7efa5870b59ed435cfa180be5

  • SSDEEP

    3072:d53mQ7JtnP5I09qgmBBAWgjSvwN/oyWD+:LmKJtna2qgmBNgQwu+

Score
10/10

Malware Config

Extracted

Credentials

  • Protocol:
    ftp
  • Host:
    ftp.tripod.com
  • Port:
    21
  • Username:
    onthelinux
  • Password:
    741852abc

Targets

    • Target

      ed8897bcabef3fc0ac9716a2658532e3_JaffaCakes118

    • Size

      269KB

    • MD5

      ed8897bcabef3fc0ac9716a2658532e3

    • SHA1

      04c846d310b38382e4bc768d33e85a405b2f7afe

    • SHA256

      7f4090d1b5012cf6b70887896922b113c33ab07575d39f646981729fb5a766ea

    • SHA512

      3c5db0cbe00e376670dd2a437d32ae3d94f13ce453dc7c49d5467be4fc219d17583fcf5c866c3390121cf1711f92faedbe459fc7efa5870b59ed435cfa180be5

    • SSDEEP

      3072:d53mQ7JtnP5I09qgmBBAWgjSvwN/oyWD+:LmKJtna2qgmBNgQwu+

    Score
    10/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks