025199f433bbde5de98929b370dc491b84ea0abfa1b897d75127b283e43ea2d5

General

Target
0d8e5f3d626b5a1bd4ac95662d431013_JaffaCakes118
Size 269KB
Sample241003-c94dhs1blp
SHA256 025199f433bbde5de98929b370dc491b84ea0abfa1b897d75127b283e43ea2d5
MD5 0d8e5f3d626b5a1bd4ac95662d431013
SHA1 a5b62b6970d7e14b55d51be0b074725c2daa7343
SHA512 0542e4e98d76d5fe8b27c7691b30d5bb48252303e5e6a7ada8b24c4141c831a237a8fbda6f6c38fd597dffec977065766140a068e5fce12b436d4cfbfa094d1c
SSDEEP 6144:rsaocyLC6iOCrt4LPI9ptKV7eqytRpIpHyMuZPZYU:rtobxiOYMg9ptK1Eo3uZPZYU
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery

Malware Config

Targets

- Target
  0d8e5f3d626b5a1bd4ac95662d431013_JaffaCakes118
- Size 269KB
- SHA256 025199f433bbde5de98929b370dc491b84ea0abfa1b897d75127b283e43ea2d5
- MD5 0d8e5f3d626b5a1bd4ac95662d431013
- SHA1 a5b62b6970d7e14b55d51be0b074725c2daa7343
- SHA512 0542e4e98d76d5fe8b27c7691b30d5bb48252303e5e6a7ada8b24c4141c831a237a8fbda6f6c38fd597dffec977065766140a068e5fce12b436d4cfbfa094d1c
- SSDEEP 6144:rsaocyLC6iOCrt4LPI9ptKV7eqytRpIpHyMuZPZYU:rtobxiOYMg9ptK1Eo3uZPZYU
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2
- Target
  $PLUGINSDIR/installer5.exe
- Size 215KB
- SHA256 28e778a7e5f91d27cf37e7ed8624adb8e9f33d7d12d64ed6420b5345052591b0
- MD5 029162f299af12e48fc5ffde104766e2
- SHA1 467b9336af5aec76cbb548ece146cd2d7b4e1264
- SHA512 fa522ef2364e5a31c119993d8057a3337bffdb7ce259b810efeb59e105885c8ca75086e1d568121600a919ad160e3be2667486ab56de7e7393df8d895293863c
- SSDEEP 6144:CDsvqBa8e7G39JPeepCbyGHyWqTW6h9EZLgee3Br:CDsvq8899zCEh9U4
- MD5 SHA1 SHA512 SSDEEP
Score

6^/10

discovery
- Drops desktop.ini file(s)
behavioral3 behavioral4
- Target
  $PLUGINSDIR/nsExec.dll
- Size 8KB
- SHA256 7298024a36310b7c4c112be87b61b62a0b1be493e2d5252a19e5e976daf674ce
- MD5 249ae678f0dac4c625c6de6aca53823a
- SHA1 6ac2b9e90e8445fed4c45c5dbf2d0227cd3b5201
- SHA512 66e4081a40f3191bf28b810cf8411cb3c8c3e3ec5943e18d6672414fb5e7b4364f862cba44c9115c599ac90890ef02a773e254e7c979e930946bc52b0693aad7
- SSDEEP 192:r/QeHNWSvUTfWdXw08LYKFaynLb3MRlbOVlR:7jBvwudT8LJxnnMRlyVlR
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral5 behavioral6