General

  • Target

    047abcd8bff68b8841ea5878cd19ff0e_JaffaCakes118

  • Size

    27KB

  • Sample

    240620-kr4wbsshlr

  • MD5

    047abcd8bff68b8841ea5878cd19ff0e

  • SHA1

    2627810496f9b376a70de282a8de98828e819597

  • SHA256

    943e7f9570a813e0c17efd1913fd9f066ccf84877edc68c5627147226981f39e

  • SHA512

    74f4abd50bc32109e3f121bce36865ba6be2dd743243942aba358f73f5261bc99d8a037283b7488a369abe4092e5340f8d7e9902e430baf5f6f0bb9174ee5c6b

  • SSDEEP

    384:5GOGg9019PHBTTsCcdKK58qZbf8586YlRG/O6PHz/3Qj+U2xPkulrJuMMT:57Gg6ZcFX5JZbU5bYGOEDAn2xlr

Malware Config

Targets

    • Target

      047abcd8bff68b8841ea5878cd19ff0e_JaffaCakes118

    • Size

      27KB

    • MD5

      047abcd8bff68b8841ea5878cd19ff0e

    • SHA1

      2627810496f9b376a70de282a8de98828e819597

    • SHA256

      943e7f9570a813e0c17efd1913fd9f066ccf84877edc68c5627147226981f39e

    • SHA512

      74f4abd50bc32109e3f121bce36865ba6be2dd743243942aba358f73f5261bc99d8a037283b7488a369abe4092e5340f8d7e9902e430baf5f6f0bb9174ee5c6b

    • SSDEEP

      384:5GOGg9019PHBTTsCcdKK58qZbf8586YlRG/O6PHz/3Qj+U2xPkulrJuMMT:57Gg6ZcFX5JZbU5bYGOEDAn2xlr

    • Adds policy Run key to start application

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks