General

  • Target

    27e63b06a61b4f3d6f417341c31062b4_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240728-2dqvzssfrc

  • MD5

    27e63b06a61b4f3d6f417341c31062b4

  • SHA1

    3e032c225fa8a852c7f60ef43f19a45fbdde5b17

  • SHA256

    840ac748c10b7ea6025933eaf10d87a929a4c0bb17393de4b234bdbdb66b8f5a

  • SHA512

    60c3c3d14ffc03f6dd3661c628deec064efc987d8aae71519c3d6f2d92693272849562ed55feeb7dfa9764078a949c244249946f10b90b8d1382b9c148c8ccb7

  • SSDEEP

    24576:4vRE7caCfKGPqVEDNLFxKsfaxI+gIGYuuCol7r:4vREKfPqVE5jKsfaxRHGVo7r

Malware Config

Targets

    • Target

      27e63b06a61b4f3d6f417341c31062b4_JaffaCakes118

    • Size

      1.1MB

    • MD5

      27e63b06a61b4f3d6f417341c31062b4

    • SHA1

      3e032c225fa8a852c7f60ef43f19a45fbdde5b17

    • SHA256

      840ac748c10b7ea6025933eaf10d87a929a4c0bb17393de4b234bdbdb66b8f5a

    • SHA512

      60c3c3d14ffc03f6dd3661c628deec064efc987d8aae71519c3d6f2d92693272849562ed55feeb7dfa9764078a949c244249946f10b90b8d1382b9c148c8ccb7

    • SSDEEP

      24576:4vRE7caCfKGPqVEDNLFxKsfaxI+gIGYuuCol7r:4vREKfPqVE5jKsfaxRHGVo7r

    • MrBlack Trojan

      IoT botnet which infects routers to be used for DDoS attacks.

    • MrBlack trojan

    • Executes dropped EXE

    • Write file to user bin folder

MITRE ATT&CK Enterprise v15

Tasks