General

  • Target

    7f23c1da36ae208a3e7b439e78055a05_JaffaCakes118

  • Size

    581KB

  • Sample

    241030-n9axra1qev

  • MD5

    7f23c1da36ae208a3e7b439e78055a05

  • SHA1

    a25783d5f00c8723a5ef3fe8364730d3b688b672

  • SHA256

    f05803cc286b150f66b6d923b0a7a018f023572b7e2a94cfe48519b2184f6898

  • SHA512

    115e7efad6b7095b7c5ef5771ef153625a95fddbe8aef860983481fe57e3cb230e9f007d23762859a77ff10a2960a49481a20441f866499298d33328f93f2951

  • SSDEEP

    12288:uoMDtCi7NFlZnNqZ9xGrLpZ0ZHEqtgb0UU:ufplNFgxG5eZngb0T

Malware Config

Targets

    • Target

      7f23c1da36ae208a3e7b439e78055a05_JaffaCakes118

    • Size

      581KB

    • MD5

      7f23c1da36ae208a3e7b439e78055a05

    • SHA1

      a25783d5f00c8723a5ef3fe8364730d3b688b672

    • SHA256

      f05803cc286b150f66b6d923b0a7a018f023572b7e2a94cfe48519b2184f6898

    • SHA512

      115e7efad6b7095b7c5ef5771ef153625a95fddbe8aef860983481fe57e3cb230e9f007d23762859a77ff10a2960a49481a20441f866499298d33328f93f2951

    • SSDEEP

      12288:uoMDtCi7NFlZnNqZ9xGrLpZ0ZHEqtgb0UU:ufplNFgxG5eZngb0T

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

MITRE ATT&CK Enterprise v15

Tasks