General

  • Target

    0350cb66ff76cf531333a00bd9449415_JaffaCakes118

  • Size

    33KB

  • Sample

    240930-1akzwswckq

  • MD5

    0350cb66ff76cf531333a00bd9449415

  • SHA1

    04a4d409d7e0669f08fc1a85f1b71b38832c5ead

  • SHA256

    f6717f9d37a4b7426c72364411164990785f508dfea4955f5b987769f7d506c1

  • SHA512

    46016e7a30d5fe9524785f9f265cf6e0fec63965b101458bc1fb328a5ee7880e9757a4c5cc07b9a917f5dbd6c0620bf300c393393a41ab0d83ebc7179a686407

  • SSDEEP

    768:kf1Y9RRw/dUT6vurGd/pkUOyGAv+rh95kRjylylyl01:GY9jw/dUT62rGdiUOWWrNY1

Malware Config

Targets

    • Target

      0350cb66ff76cf531333a00bd9449415_JaffaCakes118

    • Size

      33KB

    • MD5

      0350cb66ff76cf531333a00bd9449415

    • SHA1

      04a4d409d7e0669f08fc1a85f1b71b38832c5ead

    • SHA256

      f6717f9d37a4b7426c72364411164990785f508dfea4955f5b987769f7d506c1

    • SHA512

      46016e7a30d5fe9524785f9f265cf6e0fec63965b101458bc1fb328a5ee7880e9757a4c5cc07b9a917f5dbd6c0620bf300c393393a41ab0d83ebc7179a686407

    • SSDEEP

      768:kf1Y9RRw/dUT6vurGd/pkUOyGAv+rh95kRjylylyl01:GY9jw/dUT62rGdiUOWWrNY1

    • Upatre

      Upatre is a generic malware downloader.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks