General

  • Target

    8d5aecb4788c4100e4f22d6da5f4f6c3_JaffaCakes118

  • Size

    184KB

  • Sample

    241103-y85e3steja

  • MD5

    8d5aecb4788c4100e4f22d6da5f4f6c3

  • SHA1

    31b8c12287e9ced994b30845883395ab953039fc

  • SHA256

    6d220123b6cd32c5dc7b652c2797e27ba9ce6c40a327d740932a50a3a5b607dd

  • SHA512

    e4fc0af6111d0ea7f3070b0b05bcddfcdd1fe3837557dcdbc70946a5cc4ed80a6317b62c387f2885a4144261e664e191fd912ec4b378f6d77d0d3e763f5692e6

  • SSDEEP

    3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3O:/7BSH8zUB+nGESaaRvoB7FJNndnt

Score
8/10

Malware Config

Targets

    • Target

      8d5aecb4788c4100e4f22d6da5f4f6c3_JaffaCakes118

    • Size

      184KB

    • MD5

      8d5aecb4788c4100e4f22d6da5f4f6c3

    • SHA1

      31b8c12287e9ced994b30845883395ab953039fc

    • SHA256

      6d220123b6cd32c5dc7b652c2797e27ba9ce6c40a327d740932a50a3a5b607dd

    • SHA512

      e4fc0af6111d0ea7f3070b0b05bcddfcdd1fe3837557dcdbc70946a5cc4ed80a6317b62c387f2885a4144261e664e191fd912ec4b378f6d77d0d3e763f5692e6

    • SSDEEP

      3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3O:/7BSH8zUB+nGESaaRvoB7FJNndnt

    Score
    8/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks