General

  • Target

    64005098cdb549db3a59ec0c70ebb0ef_JaffaCakes118

  • Size

    748KB

  • Sample

    240521-t68bqsca9t

  • MD5

    64005098cdb549db3a59ec0c70ebb0ef

  • SHA1

    f4fde59d77df47195751a16e6a9e88c9feef7c9a

  • SHA256

    b13a074eedc1b718f0a80e489385aaa2eeb64037b5ee50ea312c6e5260443223

  • SHA512

    6ea86e803d6730344930bf8123d8278adc4633ff1d14e23efad1962e7cf0ee57171af7344aac6b3e471f2da5d640cd9594403b7674c343c5dc8718eeeca9294d

  • SSDEEP

    12288:OCVVVVVVVf8g1ufKr43yABrn9rxVGB7SLCY1J1kGl8V3eZsemDhkJ0:OEk9n9rxVG96r1/kGlVZshDhw0

Malware Config

Targets

    • Target

      64005098cdb549db3a59ec0c70ebb0ef_JaffaCakes118

    • Size

      748KB

    • MD5

      64005098cdb549db3a59ec0c70ebb0ef

    • SHA1

      f4fde59d77df47195751a16e6a9e88c9feef7c9a

    • SHA256

      b13a074eedc1b718f0a80e489385aaa2eeb64037b5ee50ea312c6e5260443223

    • SHA512

      6ea86e803d6730344930bf8123d8278adc4633ff1d14e23efad1962e7cf0ee57171af7344aac6b3e471f2da5d640cd9594403b7674c343c5dc8718eeeca9294d

    • SSDEEP

      12288:OCVVVVVVVf8g1ufKr43yABrn9rxVGB7SLCY1J1kGl8V3eZsemDhkJ0:OEk9n9rxVG96r1/kGlVZshDhw0

    • Kutaki

      Information stealer and keylogger that hides inside legitimate Visual Basic applications.

    • Kutaki Executable

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks