General

  • Target

    60cadaa05a6f8c38a3e1ab7fe1fea408_JaffaCakes118

  • Size

    13KB

  • Sample

    241020-g5lecswamq

  • MD5

    60cadaa05a6f8c38a3e1ab7fe1fea408

  • SHA1

    f41bfa6d98e777ad95d1f97b9b19af902fee73d0

  • SHA256

    b98060b19b3bfe24e623445920e2e2383a2770a2b0aa5b4cd24e7605457b3e5a

  • SHA512

    1cb17dd29da16956aa2e556b52803e6d38e50158f51ac646f6528e0fb7b214d84be1e49373c7be472bbdfe4e071abd807bb12b461ac6f4a46da4c946c5963ffa

  • SSDEEP

    384:6K+dKfzQHxFxRmyja4QhiP7UlY/pjKwyllN+gBI2vRGiQ:v+dAURFxna4QAPQlYgwyl/+sIwRGiQ

Malware Config

Targets

    • Target

      60cadaa05a6f8c38a3e1ab7fe1fea408_JaffaCakes118

    • Size

      13KB

    • MD5

      60cadaa05a6f8c38a3e1ab7fe1fea408

    • SHA1

      f41bfa6d98e777ad95d1f97b9b19af902fee73d0

    • SHA256

      b98060b19b3bfe24e623445920e2e2383a2770a2b0aa5b4cd24e7605457b3e5a

    • SHA512

      1cb17dd29da16956aa2e556b52803e6d38e50158f51ac646f6528e0fb7b214d84be1e49373c7be472bbdfe4e071abd807bb12b461ac6f4a46da4c946c5963ffa

    • SSDEEP

      384:6K+dKfzQHxFxRmyja4QhiP7UlY/pjKwyllN+gBI2vRGiQ:v+dAURFxna4QAPQlYgwyl/+sIwRGiQ

    • Upatre

      Upatre is a generic malware downloader.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks