General

  • Target

    738b8d21605c24e6a8e06336e65bf71a_JaffaCakes118

  • Size

    605KB

  • Sample

    240525-22knwaee24

  • MD5

    738b8d21605c24e6a8e06336e65bf71a

  • SHA1

    d60090edc6a376fee742bdae9280b01437e070af

  • SHA256

    8303e9e834f52a0e06bf97f7308f5195d23f8d87f6a554e7d6f2a422b4b2f62d

  • SHA512

    016aceec5a235490da89d8b78c2dcd6e7950853fce3a53bce9052064c837a5e2dfb4923d7e19547942c43387b6fa375db09f7a00056566e7874e7ed9c226d8c1

  • SSDEEP

    12288:ADFbpji+06AZfioD+ekdRTCzoDlxp7J1qvYhuYt1AR4Ep555555555555555555D:A9REfiomdRW+3FJkYB1455555555555B

Malware Config

Targets

    • Target

      738b8d21605c24e6a8e06336e65bf71a_JaffaCakes118

    • Size

      605KB

    • MD5

      738b8d21605c24e6a8e06336e65bf71a

    • SHA1

      d60090edc6a376fee742bdae9280b01437e070af

    • SHA256

      8303e9e834f52a0e06bf97f7308f5195d23f8d87f6a554e7d6f2a422b4b2f62d

    • SHA512

      016aceec5a235490da89d8b78c2dcd6e7950853fce3a53bce9052064c837a5e2dfb4923d7e19547942c43387b6fa375db09f7a00056566e7874e7ed9c226d8c1

    • SSDEEP

      12288:ADFbpji+06AZfioD+ekdRTCzoDlxp7J1qvYhuYt1AR4Ep555555555555555555D:A9REfiomdRW+3FJkYB1455555555555B

    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

    • Enumerates VirtualBox registry keys

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks