General

  • Target
    jaffacakes118_e67fe4c74a2e7e5d2f8bad62e573c4c1_JaffaCakes118
  • Size 163KB
  • Sample260915-t2g9rabl2w
  • SHA256 01723f6fa62d4836210884b1c52d4e673d944497c13763f100a1cce87f2f86c2
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_e67fe4c74a2e7e5d2f8bad62e573c4c1_JaffaCakes118
    • Size 163KB
    • SHA256 01723f6fa62d4836210884b1c52d4e673d944497c13763f100a1cce87f2f86c2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects Firseria

    • Family: Firseria

      Firseria a downloader/adware written in C++.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v16

Tasks