General

  • Target

    JaffaCakes118_1c61971f78d2805088bb9b341e9a0616

  • Size

    551KB

  • Sample

    250704-va2prawvbt

  • MD5

    1c61971f78d2805088bb9b341e9a0616

  • SHA1

    a9f0d3c85332e42e7ddda07317ab0a0ca379227c

  • SHA256

    ecb3101ffaba49987de6fd7bf8e020bdb93601d185adaab412caf6859effccda

  • SHA512

    1670182f311427138c6efecec6e4e0cc76290a9e75a875d640a1ad88169ba31518d85a260ba21c5dfb6926eee30188bd46bc1bfd6c7b9371ec1d5e35487b59c1

  • SSDEEP

    12288:h1OgLdaOSgbJuMmFcouJqkXWctn+MEfOj:h1OYdaOSgJHJJqkXtMOj

Malware Config

Targets

    • Target

      JaffaCakes118_1c61971f78d2805088bb9b341e9a0616

    • Size

      551KB

    • MD5

      1c61971f78d2805088bb9b341e9a0616

    • SHA1

      a9f0d3c85332e42e7ddda07317ab0a0ca379227c

    • SHA256

      ecb3101ffaba49987de6fd7bf8e020bdb93601d185adaab412caf6859effccda

    • SHA512

      1670182f311427138c6efecec6e4e0cc76290a9e75a875d640a1ad88169ba31518d85a260ba21c5dfb6926eee30188bd46bc1bfd6c7b9371ec1d5e35487b59c1

    • SSDEEP

      12288:h1OgLdaOSgbJuMmFcouJqkXWctn+MEfOj:h1OYdaOSgJHJJqkXtMOj

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v16

Tasks