General

  • Target

    f2312f11607e25c076290e051ec78515_JaffaCakes118

  • Size

    11KB

  • Sample

    240415-3qpn5ade2v

  • MD5

    f2312f11607e25c076290e051ec78515

  • SHA1

    1af274b1571c725821a2931a45725590300cb977

  • SHA256

    1570683d229cd8fc42187f91caa357cfc9a72bcf984b1a2483c68447d73482c1

  • SHA512

    66f9db44c6613fdd72a577c879d1667f1d33ec92e2d0dafd5b9153b3289d3286c0993c0a1d194605068372d5ebbd1bfc3b20f129459020787ab42dd510e0fadf

  • SSDEEP

    192:MpCiAZ74IEE4PwH3ZtGqO6HIlkbbA1s0jb4tillhQIW:MphY0joJk/Sd0LaiHk

Score
8/10

Malware Config

Targets

    • Target

      f2312f11607e25c076290e051ec78515_JaffaCakes118

    • Size

      11KB

    • MD5

      f2312f11607e25c076290e051ec78515

    • SHA1

      1af274b1571c725821a2931a45725590300cb977

    • SHA256

      1570683d229cd8fc42187f91caa357cfc9a72bcf984b1a2483c68447d73482c1

    • SHA512

      66f9db44c6613fdd72a577c879d1667f1d33ec92e2d0dafd5b9153b3289d3286c0993c0a1d194605068372d5ebbd1bfc3b20f129459020787ab42dd510e0fadf

    • SSDEEP

      192:MpCiAZ74IEE4PwH3ZtGqO6HIlkbbA1s0jb4tillhQIW:MphY0joJk/Sd0LaiHk

    Score
    8/10
    • Modifies AppInit DLL entries

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks