General

  • Target

    fb886d40e8eb1862cd3fa35759e0b8c7_JaffaCakes118

  • Size

    1.2MB

  • Sample

    240420-a1lq1acf2y

  • MD5

    fb886d40e8eb1862cd3fa35759e0b8c7

  • SHA1

    d6deead61e19b7905ce6f4b76e9e814ffc0a679c

  • SHA256

    5567d462e2efd478e7fbe872444af2852b08d6934d26ecb104590cf4488dd8bd

  • SHA512

    9ce1151931e47e989e03d61715d3d1f99de89636449edc438c0696667466c7e9826447462aebf9f9c685888d24aff357f0b80559efaf69ffde71ba7b884cc1d5

  • SSDEEP

    24576:CoxB2mlb853z3+J+RXg7SRgyjMJIr9iKV:pBbKDQIgyat

Score
7/10

Malware Config

Targets

    • Target

      fb886d40e8eb1862cd3fa35759e0b8c7_JaffaCakes118

    • Size

      1.2MB

    • MD5

      fb886d40e8eb1862cd3fa35759e0b8c7

    • SHA1

      d6deead61e19b7905ce6f4b76e9e814ffc0a679c

    • SHA256

      5567d462e2efd478e7fbe872444af2852b08d6934d26ecb104590cf4488dd8bd

    • SHA512

      9ce1151931e47e989e03d61715d3d1f99de89636449edc438c0696667466c7e9826447462aebf9f9c685888d24aff357f0b80559efaf69ffde71ba7b884cc1d5

    • SSDEEP

      24576:CoxB2mlb853z3+J+RXg7SRgyjMJIr9iKV:pBbKDQIgyat

    Score
    7/10
    • Drops startup file

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

MITRE ATT&CK Matrix ATT&CK v13

Tasks