General

  • Target

    f94e9b88f4fb5af3bc71803b8e258f6e_JaffaCakes118

  • Size

    23KB

  • Sample

    240419-czvzdsec74

  • MD5

    f94e9b88f4fb5af3bc71803b8e258f6e

  • SHA1

    3d2d5d8f3c29272aa18bacbfbd93c9f6098903fd

  • SHA256

    da8d76123a9c20471caeacaf002a0e011543bed3eeec3558402b1913214dd004

  • SHA512

    bce3caac8905871fd0026c3c1d5d765546dca465390eca022227fbc2cd4639f9bd697f9fdcf22e4f67530232db2aa9cbbdc116031decc434c435396a3268a99b

  • SSDEEP

    384:C4d0hJc1txpxacog/Zug3Y66Ud8Qdyv56jQYv0Innx6ir/ukkd0EGJlC:C4d0hIx75Zug3mUOQdyRnYsE6i7ukINY

Malware Config

Targets

    • Target

      f94e9b88f4fb5af3bc71803b8e258f6e_JaffaCakes118

    • Size

      23KB

    • MD5

      f94e9b88f4fb5af3bc71803b8e258f6e

    • SHA1

      3d2d5d8f3c29272aa18bacbfbd93c9f6098903fd

    • SHA256

      da8d76123a9c20471caeacaf002a0e011543bed3eeec3558402b1913214dd004

    • SHA512

      bce3caac8905871fd0026c3c1d5d765546dca465390eca022227fbc2cd4639f9bd697f9fdcf22e4f67530232db2aa9cbbdc116031decc434c435396a3268a99b

    • SSDEEP

      384:C4d0hJc1txpxacog/Zug3Y66Ud8Qdyv56jQYv0Innx6ir/ukkd0EGJlC:C4d0hIx75Zug3mUOQdyRnYsE6i7ukINY

    • Modifies firewall policy service

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks