General

  • Target

    0c54d2ae9c14efbcbbb00400970f1882_JaffaCakes118

  • Size

    848KB

  • Sample

    240501-vf423adh45

  • MD5

    0c54d2ae9c14efbcbbb00400970f1882

  • SHA1

    a81d4f9f8ac30ea98557e09e9a7097a7560dc288

  • SHA256

    2df19babfd77debddaca213c48022b200593b478afc1907bbe6a2b31c439f0b0

  • SHA512

    71593244ae73e3318f9974f408164fa9a80537f293f0f5cff8cb92893d4362a842bacc81a6ace747969ef68573a5ad9d4f435eb13b4824403f9f16b3379e2b0e

  • SSDEEP

    12288:YMgdE74Qo2aKplFAuL1Xt/jV6ZmFwDrr74jVr/b6tE67cEFpb4Re7:YMg8Pd9b/pSewD37yr/WE67cEnERS

Malware Config

Targets

    • Target

      0c54d2ae9c14efbcbbb00400970f1882_JaffaCakes118

    • Size

      848KB

    • MD5

      0c54d2ae9c14efbcbbb00400970f1882

    • SHA1

      a81d4f9f8ac30ea98557e09e9a7097a7560dc288

    • SHA256

      2df19babfd77debddaca213c48022b200593b478afc1907bbe6a2b31c439f0b0

    • SHA512

      71593244ae73e3318f9974f408164fa9a80537f293f0f5cff8cb92893d4362a842bacc81a6ace747969ef68573a5ad9d4f435eb13b4824403f9f16b3379e2b0e

    • SSDEEP

      12288:YMgdE74Qo2aKplFAuL1Xt/jV6ZmFwDrr74jVr/b6tE67cEFpb4Re7:YMg8Pd9b/pSewD37yr/WE67cEnERS

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Stops running service(s)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks