General

  • Target

    3859f2ffd142b834cc60e510494be7bf_JaffaCakes118

  • Size

    3.0MB

  • Sample

    241012-emt8fawhnq

  • MD5

    3859f2ffd142b834cc60e510494be7bf

  • SHA1

    24f3372136c25beff4959464bf97412c2f2b9031

  • SHA256

    a6eade40d178183a1119a3ef17c47fb2877efd9390e49076906c6b348c137232

  • SHA512

    b762dedb616cfb00bcecef8b2c149f4677e32383af9228975c00f77c3b5e9a91b69c5c367303b7fd9041eb6b459c2d330466c60813bdfdc442551909084850fa

  • SSDEEP

    49152:SgCh1LGumhuW+5S0z0pEhd/l0mWKp719Qq3yobleQD80gboI5/4X0W0z0pEhd/l+:HCPSpED/ppLh3ScE4X0ypED/pq

Malware Config

Targets

    • Target

      3859f2ffd142b834cc60e510494be7bf_JaffaCakes118

    • Size

      3.0MB

    • MD5

      3859f2ffd142b834cc60e510494be7bf

    • SHA1

      24f3372136c25beff4959464bf97412c2f2b9031

    • SHA256

      a6eade40d178183a1119a3ef17c47fb2877efd9390e49076906c6b348c137232

    • SHA512

      b762dedb616cfb00bcecef8b2c149f4677e32383af9228975c00f77c3b5e9a91b69c5c367303b7fd9041eb6b459c2d330466c60813bdfdc442551909084850fa

    • SSDEEP

      49152:SgCh1LGumhuW+5S0z0pEhd/l0mWKp719Qq3yobleQD80gboI5/4X0W0z0pEhd/l+:HCPSpED/ppLh3ScE4X0ypED/pq

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks