General

  • Target

    70aa4ba80b1294a8948dab33e562627b_JaffaCakes118

  • Size

    61KB

  • Sample

    240525-dmyeescd8v

  • MD5

    70aa4ba80b1294a8948dab33e562627b

  • SHA1

    00b08878f00742457ac11ab26d74f315e2c4e9bf

  • SHA256

    c27fed8f659750ba762659826b3022fdf7d31e553597bdccc0f11b745e52e501

  • SHA512

    f3982f624acf6f955a7809643da70f4d82e240b5965d63343e8c113a5fb8a8b5942d6d466b9f206aea83de5a32e3e2b0b0db487bebb767b7e5c0b40abd71e555

  • SSDEEP

    1536:syK0rfA78/Y89JGcL5AvJi6CLQ2b7P+Ut3bGo30Z98B:syPo78gMGcdAhi6437P+qiz9

Malware Config

Targets

    • Target

      70aa4ba80b1294a8948dab33e562627b_JaffaCakes118

    • Size

      61KB

    • MD5

      70aa4ba80b1294a8948dab33e562627b

    • SHA1

      00b08878f00742457ac11ab26d74f315e2c4e9bf

    • SHA256

      c27fed8f659750ba762659826b3022fdf7d31e553597bdccc0f11b745e52e501

    • SHA512

      f3982f624acf6f955a7809643da70f4d82e240b5965d63343e8c113a5fb8a8b5942d6d466b9f206aea83de5a32e3e2b0b0db487bebb767b7e5c0b40abd71e555

    • SSDEEP

      1536:syK0rfA78/Y89JGcL5AvJi6CLQ2b7P+Ut3bGo30Z98B:syPo78gMGcdAhi6437P+qiz9

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks