General

  • Target

    f169db03a4d6ee6a2c24b08bbc017232_JaffaCakes118

  • Size

    501KB

  • Sample

    240415-s6v6qsab39

  • MD5

    f169db03a4d6ee6a2c24b08bbc017232

  • SHA1

    1cb900a4bdb39c2c0c9a22089215ccb1faaaa41d

  • SHA256

    8652119be4dccd30958786c1aea7f7745a80fd7af411f21cc7f141f628212004

  • SHA512

    bdfd6f6e0dd427d7377d1ce75dcd9e71eed69ced73dac66e7ead2daffa2ed445811c926ea277fb18ca0ea8e3bff0c0b2d552f926e1bbcafc622cc4d676c4ffe8

  • SSDEEP

    12288:Bf7bkjbB3h+2Ry3B9jmWAh7HAEeoU2y9z5l:Bf7wjbZh+2Ry3HeTDN

Score
7/10
upx

Malware Config

Targets

    • Target

      f169db03a4d6ee6a2c24b08bbc017232_JaffaCakes118

    • Size

      501KB

    • MD5

      f169db03a4d6ee6a2c24b08bbc017232

    • SHA1

      1cb900a4bdb39c2c0c9a22089215ccb1faaaa41d

    • SHA256

      8652119be4dccd30958786c1aea7f7745a80fd7af411f21cc7f141f628212004

    • SHA512

      bdfd6f6e0dd427d7377d1ce75dcd9e71eed69ced73dac66e7ead2daffa2ed445811c926ea277fb18ca0ea8e3bff0c0b2d552f926e1bbcafc622cc4d676c4ffe8

    • SSDEEP

      12288:Bf7bkjbB3h+2Ry3B9jmWAh7HAEeoU2y9z5l:Bf7wjbZh+2Ry3HeTDN

    Score
    7/10
    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks