General

  • Target

    3a851905acce543daeca29654e85b57e_JaffaCakes118

  • Size

    96KB

  • Sample

    240711-yph3qs1gkm

  • MD5

    3a851905acce543daeca29654e85b57e

  • SHA1

    d1a2d72a4621ee4248df8e71720ac8ecbbe6445a

  • SHA256

    2bde0f16ab210cc534d713d4ac64d4dfd27c1ae87ec8c81ac9088ba5a205768e

  • SHA512

    58499831eaad659a5c8fba5af3876894a376a9a81e5e1d34b7e06deee3e2beed153b83b9abdb98074075105a3d6cb7b1b6cc27c608abce40f57cd11ad63b875f

  • SSDEEP

    1536:Y8wSyQ74MdS3ZoogvjUzD0Btc8Ko/i38ARADHqvaaggeKq9vVoAu:Y8wSyQjdS3ZozU32K9YHFa6KUvVo/

Malware Config

Targets

    • Target

      3a851905acce543daeca29654e85b57e_JaffaCakes118

    • Size

      96KB

    • MD5

      3a851905acce543daeca29654e85b57e

    • SHA1

      d1a2d72a4621ee4248df8e71720ac8ecbbe6445a

    • SHA256

      2bde0f16ab210cc534d713d4ac64d4dfd27c1ae87ec8c81ac9088ba5a205768e

    • SHA512

      58499831eaad659a5c8fba5af3876894a376a9a81e5e1d34b7e06deee3e2beed153b83b9abdb98074075105a3d6cb7b1b6cc27c608abce40f57cd11ad63b875f

    • SSDEEP

      1536:Y8wSyQ74MdS3ZoogvjUzD0Btc8Ko/i38ARADHqvaaggeKq9vVoAu:Y8wSyQjdS3ZozU32K9YHFa6KUvVo/

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks