General

  • Target

    7844a573617e54bfc791254022278ac1_JaffaCakes118

  • Size

    28KB

  • Sample

    240727-p5zkzstdjf

  • MD5

    7844a573617e54bfc791254022278ac1

  • SHA1

    8ef1bc4881c4440625a7a35b3a53309d601105e7

  • SHA256

    bc787aab48675858163b6ab39a1455a803109d52a7ffdcce47473014780b469c

  • SHA512

    31ab8c5b4e1a022071f09893d726c1342657978bfdf05ad1fd5d90eac0caac82274ff456cbb2ddb935f79a908d972329d1d849fade7635e4dcd97558cb4ddda7

  • SSDEEP

    384:xAHEkW01110XxTGIFpGQUoVdMf8xHIePPde1X8sN2MUc4FSvj33aZxSyrBinwmk8:NkW02xVOAMCq3p4F03QkOlJtUstA0O/

Malware Config

Targets

    • Target

      7844a573617e54bfc791254022278ac1_JaffaCakes118

    • Size

      28KB

    • MD5

      7844a573617e54bfc791254022278ac1

    • SHA1

      8ef1bc4881c4440625a7a35b3a53309d601105e7

    • SHA256

      bc787aab48675858163b6ab39a1455a803109d52a7ffdcce47473014780b469c

    • SHA512

      31ab8c5b4e1a022071f09893d726c1342657978bfdf05ad1fd5d90eac0caac82274ff456cbb2ddb935f79a908d972329d1d849fade7635e4dcd97558cb4ddda7

    • SSDEEP

      384:xAHEkW01110XxTGIFpGQUoVdMf8xHIePPde1X8sN2MUc4FSvj33aZxSyrBinwmk8:NkW02xVOAMCq3p4F03QkOlJtUstA0O/

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks