General

  • Target

    07e9516a2597243e200c0553201b2eae_JaffaCakes118

  • Size

    219KB

  • Sample

    241001-3r7akawgkm

  • MD5

    07e9516a2597243e200c0553201b2eae

  • SHA1

    8fe3f50a429f86609901ced70b010a0922c75135

  • SHA256

    12713502769c1cce9066f51d07785fb6913fde025de0c0e3d1ff811533e94607

  • SHA512

    88f284296c7002d2ffe534189ae0a291d5131052ce43bccabdd0b8f0e8f1db379efd2c5a20e4159aa7e1b64e02e9a9780dcafb480a316776ea68b442763502f6

  • SSDEEP

    6144:AcWMJJhqryYP/XaabDSViEtnCGmmoohGrCQe+ACC:AczJJhqrVP/TUiEkGmbrPe+ACC

Malware Config

Targets

    • Target

      07e9516a2597243e200c0553201b2eae_JaffaCakes118

    • Size

      219KB

    • MD5

      07e9516a2597243e200c0553201b2eae

    • SHA1

      8fe3f50a429f86609901ced70b010a0922c75135

    • SHA256

      12713502769c1cce9066f51d07785fb6913fde025de0c0e3d1ff811533e94607

    • SHA512

      88f284296c7002d2ffe534189ae0a291d5131052ce43bccabdd0b8f0e8f1db379efd2c5a20e4159aa7e1b64e02e9a9780dcafb480a316776ea68b442763502f6

    • SSDEEP

      6144:AcWMJJhqryYP/XaabDSViEtnCGmmoohGrCQe+ACC:AczJJhqrVP/TUiEkGmbrPe+ACC

    • HawkEye

      HawkEye is a malware kit that has seen continuous development since at least 2013.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks