General

  • Target
    jaffacakes118_e652e39f2dc22013cc283cd15144a176_JaffaCakes118
  • Size 165KB
  • Sample260915-tyd3xszdpg
  • SHA256 909a7baf2a54eeef953afd02628444bf53240e5ec812ba963fa0b289e8e43f94
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_e652e39f2dc22013cc283cd15144a176_JaffaCakes118
    • Size 165KB
    • SHA256 909a7baf2a54eeef953afd02628444bf53240e5ec812ba963fa0b289e8e43f94
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects Firseria

    • Family: Firseria

      Firseria a downloader/adware written in C++.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v16

Tasks