General

  • Target
    9a654c7a4c2e9c89fe8b8cfd6675150c_JaffaCakes118
  • Size 1.2MB
  • Sample240610-fsaawsdb78
  • SHA256 f66895b1e158392dd6bba2e705799955ba7aa21a03bad6d315863fbfac80d804
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10

Malware Config

Targets

    • Target
      9a654c7a4c2e9c89fe8b8cfd6675150c_JaffaCakes118
    • Size 1.2MB
    • SHA256 f66895b1e158392dd6bba2e705799955ba7aa21a03bad6d315863fbfac80d804
    • MD5 SHA1 SHA512 SSDEEP
    Score
    6/10
    • Accesses Microsoft Outlook profiles

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks