General

  • Target

    81e348ed21584b13021369f26643c06b_JaffaCakes118

  • Size

    42KB

  • Sample

    241031-gm3wpazmdy

  • MD5

    81e348ed21584b13021369f26643c06b

  • SHA1

    8d6861cdfa93d8fafacd4c180bbd9bad18079b33

  • SHA256

    e0bfbca051ceeedf4321bdb6a2125f448bc3950594b9b1cbffcd3a983db7ca20

  • SHA512

    e1755a2d315a798e44948ade92bcbae5a2c5df6cd6d382bcef7cd246d39720a882e20e5e826b34570229ca64213396d646ee25c90ccece37557f57c5e786cf7f

  • SSDEEP

    768:48exVIp4uwDjvXOTIkbM3nO5OI4XjJ5ijgrehtAOjp36SZU/JOOU/SC8:4Fz+hwj+sOjpqWaIZ8

Malware Config

Targets

    • Target

      81e348ed21584b13021369f26643c06b_JaffaCakes118

    • Size

      42KB

    • MD5

      81e348ed21584b13021369f26643c06b

    • SHA1

      8d6861cdfa93d8fafacd4c180bbd9bad18079b33

    • SHA256

      e0bfbca051ceeedf4321bdb6a2125f448bc3950594b9b1cbffcd3a983db7ca20

    • SHA512

      e1755a2d315a798e44948ade92bcbae5a2c5df6cd6d382bcef7cd246d39720a882e20e5e826b34570229ca64213396d646ee25c90ccece37557f57c5e786cf7f

    • SSDEEP

      768:48exVIp4uwDjvXOTIkbM3nO5OI4XjJ5ijgrehtAOjp36SZU/JOOU/SC8:4Fz+hwj+sOjpqWaIZ8

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks