General

  • Target

    23a0e724894f343a7626836541911338_JaffaCakes118

  • Size

    14KB

  • Sample

    241008-xb9g4ashnm

  • MD5

    23a0e724894f343a7626836541911338

  • SHA1

    f65aa24c804969e166d56b2a8eeea0e2d358bc72

  • SHA256

    cfd43c8bf138653f78ba8c8df833444251ea0001a4ca648a931cc35738855531

  • SHA512

    691fddda4c000fdb1d8b9850c6105e86d91ebcf70e89fb24af12881169276e0ed9567d632d758af84c186ded7b2473f5ed889b5149185ba7f7d1a401b2fc78f8

  • SSDEEP

    384:6K+dKfzQHxFxRmyja4QhiP7UlY/pjKhYsKkyyl7n9kyylylqylOMyQ:v+dAURFxna4QAPQlYghxKkyyl7n+yylc

Malware Config

Targets

    • Target

      23a0e724894f343a7626836541911338_JaffaCakes118

    • Size

      14KB

    • MD5

      23a0e724894f343a7626836541911338

    • SHA1

      f65aa24c804969e166d56b2a8eeea0e2d358bc72

    • SHA256

      cfd43c8bf138653f78ba8c8df833444251ea0001a4ca648a931cc35738855531

    • SHA512

      691fddda4c000fdb1d8b9850c6105e86d91ebcf70e89fb24af12881169276e0ed9567d632d758af84c186ded7b2473f5ed889b5149185ba7f7d1a401b2fc78f8

    • SSDEEP

      384:6K+dKfzQHxFxRmyja4QhiP7UlY/pjKhYsKkyyl7n9kyylylqylOMyQ:v+dAURFxna4QAPQlYghxKkyyl7n+yylc

    • Upatre

      Upatre is a generic malware downloader.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks