General

  • Target

    447688a0aea152fe938cd7ee91c47c6d_JaffaCakes118

  • Size

    111KB

  • Sample

    240515-el4eqagf38

  • MD5

    447688a0aea152fe938cd7ee91c47c6d

  • SHA1

    4383ff5bc1c67bcbeb7c9c0e70976c2215c81a99

  • SHA256

    73617187bb689c3fb3b7060efd081f1ed8c25ba25ada3522712255db9f7f07a3

  • SHA512

    5b5ecca7b8024468e19bd8584c9a086c369b692d2cca8354e2e9b90b53d257911608e60a5813312d7d4d3dc23be16ca37e649a79bb04a0eac0487352919bfc93

  • SSDEEP

    3072:bMCsyTOBJAAhI0LEp/UjgFBGzyepjUuFa5y2k:L+IftTOrF8k

Malware Config

Targets

    • Target

      447688a0aea152fe938cd7ee91c47c6d_JaffaCakes118

    • Size

      111KB

    • MD5

      447688a0aea152fe938cd7ee91c47c6d

    • SHA1

      4383ff5bc1c67bcbeb7c9c0e70976c2215c81a99

    • SHA256

      73617187bb689c3fb3b7060efd081f1ed8c25ba25ada3522712255db9f7f07a3

    • SHA512

      5b5ecca7b8024468e19bd8584c9a086c369b692d2cca8354e2e9b90b53d257911608e60a5813312d7d4d3dc23be16ca37e649a79bb04a0eac0487352919bfc93

    • SSDEEP

      3072:bMCsyTOBJAAhI0LEp/UjgFBGzyepjUuFa5y2k:L+IftTOrF8k

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks