General

  • Target

    154318b9f7bb8b29a565a7a897cb7745_JaffaCakes118

  • Size

    1.1MB

  • Sample

    241004-26jmdawdjc

  • MD5

    154318b9f7bb8b29a565a7a897cb7745

  • SHA1

    7cb9ae7669a3ccdb76c2c24eedecf07cd6af8cf4

  • SHA256

    64197e0039e3c21e521444b713047c1f91692fed9e265350bf97cc141dc622b3

  • SHA512

    da52eeaef7f08025c5c65a8c3f175940acfdf1878c0d66437d3ef834f1c154d89e57c430825066939e23cbf05a45ec3147793cc1b1780f48972e30efe0840116

  • SSDEEP

    24576:jbfU+yAGbQLIDXB20iTqF43bkrbE9Nu5n0Q5f25:8qG0abiTqFykHqNupO5

Malware Config

Targets

    • Target

      154318b9f7bb8b29a565a7a897cb7745_JaffaCakes118

    • Size

      1.1MB

    • MD5

      154318b9f7bb8b29a565a7a897cb7745

    • SHA1

      7cb9ae7669a3ccdb76c2c24eedecf07cd6af8cf4

    • SHA256

      64197e0039e3c21e521444b713047c1f91692fed9e265350bf97cc141dc622b3

    • SHA512

      da52eeaef7f08025c5c65a8c3f175940acfdf1878c0d66437d3ef834f1c154d89e57c430825066939e23cbf05a45ec3147793cc1b1780f48972e30efe0840116

    • SSDEEP

      24576:jbfU+yAGbQLIDXB20iTqF43bkrbE9Nu5n0Q5f25:8qG0abiTqFykHqNupO5

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks