General

  • Target

    3d4823163197fc7f0d9765fd03b39aa9_JaffaCakes118

  • Size

    636KB

  • Sample

    240712-n4b8mavbqe

  • MD5

    3d4823163197fc7f0d9765fd03b39aa9

  • SHA1

    4b63d369a30799f6e4ad1224af0027770c9d80fe

  • SHA256

    51c22123ed475b59a768b3b2d8d0b3bb28efbd1a3c53c612ece596654c6d7bff

  • SHA512

    ded8532a5f6868157bf29ed8272df4dd0ba8db95871f7d09d9e48e437a474da59fd9209e5f6fb546bd2e2270a8b9d83eb9c8fe35997cc6442a7e3f8e35942475

  • SSDEEP

    12288:EMJn9mLKwhvexWitB1za1rjdT9uAZx6FGjqbbshSn4/o:EMJnYLhc5t0rxTwGj+bIQ4/o

Score
10/10

Malware Config

Targets

    • Target

      3d4823163197fc7f0d9765fd03b39aa9_JaffaCakes118

    • Size

      636KB

    • MD5

      3d4823163197fc7f0d9765fd03b39aa9

    • SHA1

      4b63d369a30799f6e4ad1224af0027770c9d80fe

    • SHA256

      51c22123ed475b59a768b3b2d8d0b3bb28efbd1a3c53c612ece596654c6d7bff

    • SHA512

      ded8532a5f6868157bf29ed8272df4dd0ba8db95871f7d09d9e48e437a474da59fd9209e5f6fb546bd2e2270a8b9d83eb9c8fe35997cc6442a7e3f8e35942475

    • SSDEEP

      12288:EMJn9mLKwhvexWitB1za1rjdT9uAZx6FGjqbbshSn4/o:EMJnYLhc5t0rxTwGj+bIQ4/o

    Score
    10/10
    • UAC bypass

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

    • Checks whether UAC is enabled

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks