General

  • Target

    3692ccc9d25b0d69199998c43bf541d5_JaffaCakes118

  • Size

    22KB

  • Sample

    241011-yrs1qa1cpd

  • MD5

    3692ccc9d25b0d69199998c43bf541d5

  • SHA1

    d5925747b31006eeb335f726a359e7b0f41cd66f

  • SHA256

    0edfa3e76deef4188fc80bc38a97403aa90caef29bd295e00b4e88155d3ce092

  • SHA512

    49ed53eb49b0f3171703978016388dab7e8c8dd421b1366d0921ba7e77fd6efe5e98560967b25bf0d6aebaa7ff425374cee99dc8462674b4fac89d05c5ed5251

  • SSDEEP

    384:Zr9sOcIp6wRcsSYLvKWLWbstQTid6HJyraXkqdkJ7PNWoQaVEGmWvaNJawcudoD5:ZmOhplcsHvKWzX6HJmFqda7koQuEGmZW

Score
10/10

Malware Config

Extracted

Credentials

  • Protocol:
    ftp
  • Host:
    oaa.wallst.ru
  • Port:
    21
  • Username:
    u272293
  • Password:
    lf10bjme

Targets

    • Target

      3692ccc9d25b0d69199998c43bf541d5_JaffaCakes118

    • Size

      22KB

    • MD5

      3692ccc9d25b0d69199998c43bf541d5

    • SHA1

      d5925747b31006eeb335f726a359e7b0f41cd66f

    • SHA256

      0edfa3e76deef4188fc80bc38a97403aa90caef29bd295e00b4e88155d3ce092

    • SHA512

      49ed53eb49b0f3171703978016388dab7e8c8dd421b1366d0921ba7e77fd6efe5e98560967b25bf0d6aebaa7ff425374cee99dc8462674b4fac89d05c5ed5251

    • SSDEEP

      384:Zr9sOcIp6wRcsSYLvKWLWbstQTid6HJyraXkqdkJ7PNWoQaVEGmWvaNJawcudoD5:ZmOhplcsHvKWzX6HJmFqda7koQuEGmZW

    Score
    10/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks