General

  • Target

    67a2e852578a44251a44b83aa139ce60_JaffaCakes118

  • Size

    162KB

  • Sample

    240723-pwrtsatajh

  • MD5

    67a2e852578a44251a44b83aa139ce60

  • SHA1

    064a6c34c3b9c7562357293ee752a96ab84a43cb

  • SHA256

    1d3ea1bcd3e448de1b2ad97bf9a6004cea02cbe5f0c17e50b2a323d29ba48f5a

  • SHA512

    a34d35a6bdc2a0c50b81a199628e8a397cb84aba7341bd3727496fda2fb6025c062d9f9f0f80a88fe4bb34233d15caca4749ff963dc2daf23a72ac550e2ed0ac

  • SSDEEP

    3072:DQIURTXJ+MOWjvIvndGdxLyE9ctXp42v7ZIo+VeEJNeAgoIcIhekJhzG:Ds9B8qLUt54qUZ/g5tzG

Score
7/10

Malware Config

Targets

    • Target

      67a2e852578a44251a44b83aa139ce60_JaffaCakes118

    • Size

      162KB

    • MD5

      67a2e852578a44251a44b83aa139ce60

    • SHA1

      064a6c34c3b9c7562357293ee752a96ab84a43cb

    • SHA256

      1d3ea1bcd3e448de1b2ad97bf9a6004cea02cbe5f0c17e50b2a323d29ba48f5a

    • SHA512

      a34d35a6bdc2a0c50b81a199628e8a397cb84aba7341bd3727496fda2fb6025c062d9f9f0f80a88fe4bb34233d15caca4749ff963dc2daf23a72ac550e2ed0ac

    • SSDEEP

      3072:DQIURTXJ+MOWjvIvndGdxLyE9ctXp42v7ZIo+VeEJNeAgoIcIhekJhzG:Ds9B8qLUt54qUZ/g5tzG

    Score
    7/10
    • Loads dropped DLL

    • Adds Run key to start application

    • Target

      $TEMP/mvbgarkl.dll

    • Size

      389KB

    • MD5

      c9c123fdf0e7b7124d419590ac387e0b

    • SHA1

      0576403dab2da7bb94a673b5c3a252053dcd0ee4

    • SHA256

      7e663835edd6b61b3ffcf93b62331dabd248399f1f656c6c98b46acebe7d1558

    • SHA512

      c68e611512cadf981b95018a0ef8f20e9bdac839feaa1c8ce8bf44c95c77e69a1b698b7c0cd77dd51b1444c5028a9d9931e91041a4f1c997101f3b0c627216ba

    • SSDEEP

      3072:JSDdLRf06+2TwIOj8Yuhcmf/aUc/I5yZTjlhDjCigRpXf7E0lc:J6LRfrzOnKf/5cg5uTjlVCigRpXzE0lc

    Score
    6/10

MITRE ATT&CK Enterprise v15

Tasks