General

  • Target

    138b8238e0799c627e8c240e22a2c1c0_JaffaCakes118

  • Size

    161KB

  • Sample

    241004-qsr6tawglk

  • MD5

    138b8238e0799c627e8c240e22a2c1c0

  • SHA1

    931f8255401256c88b0494699443caab8c01ae65

  • SHA256

    a4683441c5224e36ff617323acf9f627e5717a41ff3584f7bceec7b0680ea96f

  • SHA512

    4d346959a1faa4ce30d46475fd5b3c6e0423ebdc4efef777d1df545b7b669f103e8d2f312cd8e1d6042ca8e6d7f4c43c608e039f54c64bab3d86d77fa75df616

  • SSDEEP

    3072:FYP2XerzhOUxu/XUtauF8iJkZPB6jQxwv8YC5z41LND:Fu2urzh9xu/XkauF5JgPB68xvF5zel

Score
7/10

Malware Config

Targets

    • Target

      138b8238e0799c627e8c240e22a2c1c0_JaffaCakes118

    • Size

      161KB

    • MD5

      138b8238e0799c627e8c240e22a2c1c0

    • SHA1

      931f8255401256c88b0494699443caab8c01ae65

    • SHA256

      a4683441c5224e36ff617323acf9f627e5717a41ff3584f7bceec7b0680ea96f

    • SHA512

      4d346959a1faa4ce30d46475fd5b3c6e0423ebdc4efef777d1df545b7b669f103e8d2f312cd8e1d6042ca8e6d7f4c43c608e039f54c64bab3d86d77fa75df616

    • SSDEEP

      3072:FYP2XerzhOUxu/XUtauF8iJkZPB6jQxwv8YC5z41LND:Fu2urzh9xu/XkauF5JgPB68xvF5zel

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks