General

  • Target

    4712914c5f15770371c7c2e172514ba4_JaffaCakes118

  • Size

    1.0MB

  • Sample

    240714-2hwa9svgmk

  • MD5

    4712914c5f15770371c7c2e172514ba4

  • SHA1

    fb7da721870c591583df3d92d0f95659464402c7

  • SHA256

    c8017ab95c29acc414c8e892822855a58d0b36e0d9ceef4a25687219d3a3b0c4

  • SHA512

    f056ef37eef7b32e0e876fcb3d626f1da1f3bbb7438fad676a73bdc6dacb9227dc4f17d9ea06fc156e9e83bab92ae16f9ba686ad3906e5b308f2a6d5caada8a8

  • SSDEEP

    12288:9nOSgiR/bC/hxjpk35FaZRPzJs/gR2WSnC9n4COfU59nP3H7n:9VR/bSp05F4Js48xCixIVPT

Score
10/10

Malware Config

Extracted

Language
hta
Source
URLs
hta.dropper

http://www.grooveshark.com/

Targets

    • Target

      4712914c5f15770371c7c2e172514ba4_JaffaCakes118

    • Size

      1.0MB

    • MD5

      4712914c5f15770371c7c2e172514ba4

    • SHA1

      fb7da721870c591583df3d92d0f95659464402c7

    • SHA256

      c8017ab95c29acc414c8e892822855a58d0b36e0d9ceef4a25687219d3a3b0c4

    • SHA512

      f056ef37eef7b32e0e876fcb3d626f1da1f3bbb7438fad676a73bdc6dacb9227dc4f17d9ea06fc156e9e83bab92ae16f9ba686ad3906e5b308f2a6d5caada8a8

    • SSDEEP

      12288:9nOSgiR/bC/hxjpk35FaZRPzJs/gR2WSnC9n4COfU59nP3H7n:9VR/bSp05F4Js48xCixIVPT

    Score
    10/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks