General

  • Target

    1d8c2f5cdf42f71f98076493472d6f01_JaffaCakes118

  • Size

    12KB

  • Sample

    241007-p476qszenb

  • MD5

    1d8c2f5cdf42f71f98076493472d6f01

  • SHA1

    e8d6375bee0cd302334f295036ecbfb988a35c42

  • SHA256

    68c3a04c1b14382f0c086f2670cecbf7b69e1a39d2ac023d977004727af9618b

  • SHA512

    359572f1604ac681d0f63ed5c2c433d44a0c741e5c167bd2c1b8ad021bfba4285a9bb73a46f08fe11301cd93a59568506eff21fb2cb1b284413db4f1b3756b8a

  • SSDEEP

    384:6K+dKfzQHxFxRmyja4QhiP7UlY/pjKwyllN+gBI2vRblQ:v+dAURFxna4QAPQlYgwyl/+sIwRblQ

Malware Config

Targets

    • Target

      1d8c2f5cdf42f71f98076493472d6f01_JaffaCakes118

    • Size

      12KB

    • MD5

      1d8c2f5cdf42f71f98076493472d6f01

    • SHA1

      e8d6375bee0cd302334f295036ecbfb988a35c42

    • SHA256

      68c3a04c1b14382f0c086f2670cecbf7b69e1a39d2ac023d977004727af9618b

    • SHA512

      359572f1604ac681d0f63ed5c2c433d44a0c741e5c167bd2c1b8ad021bfba4285a9bb73a46f08fe11301cd93a59568506eff21fb2cb1b284413db4f1b3756b8a

    • SSDEEP

      384:6K+dKfzQHxFxRmyja4QhiP7UlY/pjKwyllN+gBI2vRblQ:v+dAURFxna4QAPQlYgwyl/+sIwRblQ

    • Upatre

      Upatre is a generic malware downloader.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks