General

  • Target

    4530287b986059fc1b9e2bb72c85f687_JaffaCakes118

  • Size

    907KB

  • Sample

    240515-jpeb8afh4z

  • MD5

    4530287b986059fc1b9e2bb72c85f687

  • SHA1

    8b9c018b8197add1012dc27cdaf22ec400f18189

  • SHA256

    7a92ba2e9b658377e73f35b1ef0fb237ef8198752d3b63efcebff47eac25842b

  • SHA512

    56390a9daca961445905caa99387c32e9140919fd6a3324cf08c62d68306afd41000060decbcebcd4caa05ee4b6cdaae1233dbd89eaee12f122aeebd9e7a1bcc

  • SSDEEP

    24576:5BXu9HGaVH59fRyuLxTzdQdX5o0G3uDZzB:5w9VH56eqM0E8Zz

Score
7/10

Malware Config

Targets

    • Target

      4530287b986059fc1b9e2bb72c85f687_JaffaCakes118

    • Size

      907KB

    • MD5

      4530287b986059fc1b9e2bb72c85f687

    • SHA1

      8b9c018b8197add1012dc27cdaf22ec400f18189

    • SHA256

      7a92ba2e9b658377e73f35b1ef0fb237ef8198752d3b63efcebff47eac25842b

    • SHA512

      56390a9daca961445905caa99387c32e9140919fd6a3324cf08c62d68306afd41000060decbcebcd4caa05ee4b6cdaae1233dbd89eaee12f122aeebd9e7a1bcc

    • SSDEEP

      24576:5BXu9HGaVH59fRyuLxTzdQdX5o0G3uDZzB:5w9VH56eqM0E8Zz

    Score
    7/10
    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks