General

  • Target

    JaffaCakes118_2a3291a66aa6e728f703550f7adf9ad6

  • Size

    1.1MB

  • Sample

    250227-c57v5sspv7

  • MD5

    2a3291a66aa6e728f703550f7adf9ad6

  • SHA1

    181172448f83538584589f2d9574c6d0b9a6acf5

  • SHA256

    359dcbe6360ff33d39f9218bd9e6f1023c2c6ef34c557abb386d95c5056b08b4

  • SHA512

    22294180e6834425aa0abad3d7ba6357ad827edd0f0b1558b41b5a6094a4872db9231c39bad6e89658011c251a7edeb2fa817894f9210f56c74afc25b426e04d

  • SSDEEP

    24576:Y5rSlaS4P/HPBUQwkgOJoshXfdjwqnftr+4d4Ds:YR3PBDwkpJZJ9Ws

Malware Config

Targets

    • Target

      JaffaCakes118_2a3291a66aa6e728f703550f7adf9ad6

    • Size

      1.1MB

    • MD5

      2a3291a66aa6e728f703550f7adf9ad6

    • SHA1

      181172448f83538584589f2d9574c6d0b9a6acf5

    • SHA256

      359dcbe6360ff33d39f9218bd9e6f1023c2c6ef34c557abb386d95c5056b08b4

    • SHA512

      22294180e6834425aa0abad3d7ba6357ad827edd0f0b1558b41b5a6094a4872db9231c39bad6e89658011c251a7edeb2fa817894f9210f56c74afc25b426e04d

    • SSDEEP

      24576:Y5rSlaS4P/HPBUQwkgOJoshXfdjwqnftr+4d4Ds:YR3PBDwkpJZJ9Ws

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks