General

  • Target

    36dc616622ed3151f77464479931d3b3_JaffaCakes118

  • Size

    177KB

  • Sample

    240330-jcrf1sbg32

  • MD5

    36dc616622ed3151f77464479931d3b3

  • SHA1

    ae11179eb2bd3a6e18d9e736100b8fd7b431890c

  • SHA256

    b58bd2545c4e3506809e0786e9395d0529387fa2f13e01000242d2efeea30e26

  • SHA512

    5f8b57b76ae7a1fe1bf36777822365b4c4bf8c69cb3c76ed8af887b583b49e6938427aa5902e25b248c55de75efdb41aca0253a54809b3de0210d3c063bee661

  • SSDEEP

    3072:QHYzm8niNZyZXWvsYgua6T/laTVrhBnUetJ8add9QzhsinjqsjWDIvmy4Q0LFXzX:ysYPaa/GBUetJ8addQfnjcqmy4Q0LZzX

Score
10/10

Malware Config

Targets

    • Target

      36dc616622ed3151f77464479931d3b3_JaffaCakes118

    • Size

      177KB

    • MD5

      36dc616622ed3151f77464479931d3b3

    • SHA1

      ae11179eb2bd3a6e18d9e736100b8fd7b431890c

    • SHA256

      b58bd2545c4e3506809e0786e9395d0529387fa2f13e01000242d2efeea30e26

    • SHA512

      5f8b57b76ae7a1fe1bf36777822365b4c4bf8c69cb3c76ed8af887b583b49e6938427aa5902e25b248c55de75efdb41aca0253a54809b3de0210d3c063bee661

    • SSDEEP

      3072:QHYzm8niNZyZXWvsYgua6T/laTVrhBnUetJ8add9QzhsinjqsjWDIvmy4Q0LFXzX:ysYPaa/GBUetJ8addQfnjcqmy4Q0LZzX

    Score
    7/10
    • Changes its process name

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks