General

  • Target

    72f005a1e5984dec33a2421c8f786369_JaffaCakes118

  • Size

    28KB

  • Sample

    240726-g9zgsaveng

  • MD5

    72f005a1e5984dec33a2421c8f786369

  • SHA1

    13836c969fbeaff57242b2d75470c05e4f860504

  • SHA256

    c2d9a9e8421ec80773ee9d6d5358981c52f494f26186b4b05c7513df7ab63da5

  • SHA512

    291359ea9fbac168c1e06d3397956a3a17eb0aebe2414d878eab235b0ce874f7f09d6f852da3e381254d04ccf31cb6fe7fb1598fd44aa1447f548d9d2cd91276

  • SSDEEP

    384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNyxHaR3:Dv8IRRdsxq1DjJcqfLxHe

Malware Config

Targets

    • Target

      72f005a1e5984dec33a2421c8f786369_JaffaCakes118

    • Size

      28KB

    • MD5

      72f005a1e5984dec33a2421c8f786369

    • SHA1

      13836c969fbeaff57242b2d75470c05e4f860504

    • SHA256

      c2d9a9e8421ec80773ee9d6d5358981c52f494f26186b4b05c7513df7ab63da5

    • SHA512

      291359ea9fbac168c1e06d3397956a3a17eb0aebe2414d878eab235b0ce874f7f09d6f852da3e381254d04ccf31cb6fe7fb1598fd44aa1447f548d9d2cd91276

    • SSDEEP

      384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNyxHaR3:Dv8IRRdsxq1DjJcqfLxHe

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks