General

  • Target

    4fba3011e04fd17086d5ff5c2343c117_JaffaCakes118

  • Size

    13KB

  • Sample

    241016-3zx2vszhqg

  • MD5

    4fba3011e04fd17086d5ff5c2343c117

  • SHA1

    4c171f0d589d1fff41de4fcfad52351d95b1d752

  • SHA256

    8d3dca33585cf75f58c79577b6aa3876873b0f16988a12dcb2581dfd92a12b74

  • SHA512

    7e52f58fa04be7942fa80777a0f7cccc12ccde3d99a94ad1bd1516666b7c4386461a11b0949acba1f646186073eabf93d20b0dae1db8a65e57e052c53f09a169

  • SSDEEP

    384:6K+dKfzQHxFxRmyja4QhiP7UlY/pjKhYsKUAylUmtybPyly9lyQ:v+dAURFxna4QAPQlYghxKUAyl9tybPyO

Malware Config

Targets

    • Target

      4fba3011e04fd17086d5ff5c2343c117_JaffaCakes118

    • Size

      13KB

    • MD5

      4fba3011e04fd17086d5ff5c2343c117

    • SHA1

      4c171f0d589d1fff41de4fcfad52351d95b1d752

    • SHA256

      8d3dca33585cf75f58c79577b6aa3876873b0f16988a12dcb2581dfd92a12b74

    • SHA512

      7e52f58fa04be7942fa80777a0f7cccc12ccde3d99a94ad1bd1516666b7c4386461a11b0949acba1f646186073eabf93d20b0dae1db8a65e57e052c53f09a169

    • SSDEEP

      384:6K+dKfzQHxFxRmyja4QhiP7UlY/pjKhYsKUAylUmtybPyly9lyQ:v+dAURFxna4QAPQlYghxKUAyl9tybPyO

    • Upatre

      Upatre is a generic malware downloader.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks