General

  • Target

    1222e9246e959f98c7582d539fd91748_JaffaCakes118

  • Size

    456KB

  • Sample

    240626-qr4s8awhjc

  • MD5

    1222e9246e959f98c7582d539fd91748

  • SHA1

    bdf58d848ab476bcb462fa2aff566786cbe13281

  • SHA256

    c3c2605c5add75a0e5a5e8f7c68f3e5089d4848b696926c6acf72fd109f7755b

  • SHA512

    c9d094a3b1fb34b81040e5848d877836c898c149ffd8eef85dbda3503f74a0a65f03b6a1fc546b4ce909c7b94e29975c6e5a2d9fdce30b3e07cf7de394c87eaa

  • SSDEEP

    12288:vOKpOZTUXE7Cg6rpIqzKMuHxKr4ukIL8H:WKpOZQXWyzKrdhvH

Malware Config

Targets

    • Target

      1222e9246e959f98c7582d539fd91748_JaffaCakes118

    • Size

      456KB

    • MD5

      1222e9246e959f98c7582d539fd91748

    • SHA1

      bdf58d848ab476bcb462fa2aff566786cbe13281

    • SHA256

      c3c2605c5add75a0e5a5e8f7c68f3e5089d4848b696926c6acf72fd109f7755b

    • SHA512

      c9d094a3b1fb34b81040e5848d877836c898c149ffd8eef85dbda3503f74a0a65f03b6a1fc546b4ce909c7b94e29975c6e5a2d9fdce30b3e07cf7de394c87eaa

    • SSDEEP

      12288:vOKpOZTUXE7Cg6rpIqzKMuHxKr4ukIL8H:WKpOZQXWyzKrdhvH

    • Executes dropped EXE

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks