General

  • Target

    c38d9c55311fee54bd24bfbca5e17250_JaffaCakes118

  • Size

    168KB

  • Sample

    240404-2jepxacb3z

  • MD5

    c38d9c55311fee54bd24bfbca5e17250

  • SHA1

    00c2c4f7481c35d82be04c0b3a1507d6eca029e9

  • SHA256

    c6e864592a54686c236af7ea00499bca60a6db83978a20db53236a72c2422c04

  • SHA512

    bd51cc1ae6400f177f6e987a32274c8f357af86df0fe33f66bbf629a0fa96b31d4dfa2795f8be6fce70544e427ac875abdf0e964c03df37958a0a1668a73efef

  • SSDEEP

    3072:HMEpI5SwhimW4YNCJ3ev8Z1N1oo8OSKO1wllwC8YwO/aecY:np3P1s9Zn1oC01AwFRO/an

Score
10/10

Malware Config

Targets

    • Target

      c38d9c55311fee54bd24bfbca5e17250_JaffaCakes118

    • Size

      168KB

    • MD5

      c38d9c55311fee54bd24bfbca5e17250

    • SHA1

      00c2c4f7481c35d82be04c0b3a1507d6eca029e9

    • SHA256

      c6e864592a54686c236af7ea00499bca60a6db83978a20db53236a72c2422c04

    • SHA512

      bd51cc1ae6400f177f6e987a32274c8f357af86df0fe33f66bbf629a0fa96b31d4dfa2795f8be6fce70544e427ac875abdf0e964c03df37958a0a1668a73efef

    • SSDEEP

      3072:HMEpI5SwhimW4YNCJ3ev8Z1N1oo8OSKO1wllwC8YwO/aecY:np3P1s9Zn1oC01AwFRO/an

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Async RAT payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks