General

  • Target

    82ebfa8c96baa06ca6ad0a186e913778_JaffaCakes118

  • Size

    403KB

  • Sample

    240802-ebnlhsvamq

  • MD5

    82ebfa8c96baa06ca6ad0a186e913778

  • SHA1

    ded18871dc63c82f4c78a2a8864ec339a80b3d3c

  • SHA256

    1cac59167c2e99fd929501153834df1cfd1463ff9930cc04f33f1c1041f8672a

  • SHA512

    c528408e67bde88dfc72e779a07ced1e2608075443e4228bedcba218bdd63b79d3c29733a125cf185a21a370fcfe55053548b288b2ecce9ab4df97054b11ef7c

  • SSDEEP

    6144:0Lf6yK4bOhYCo0b5CvEta++7tNeepwP7LpZU1u4vrBvnqJN2W:0Dhhb85U+a+wT4LfU1u4vN8N

Malware Config

Targets

    • Target

      82ebfa8c96baa06ca6ad0a186e913778_JaffaCakes118

    • Size

      403KB

    • MD5

      82ebfa8c96baa06ca6ad0a186e913778

    • SHA1

      ded18871dc63c82f4c78a2a8864ec339a80b3d3c

    • SHA256

      1cac59167c2e99fd929501153834df1cfd1463ff9930cc04f33f1c1041f8672a

    • SHA512

      c528408e67bde88dfc72e779a07ced1e2608075443e4228bedcba218bdd63b79d3c29733a125cf185a21a370fcfe55053548b288b2ecce9ab4df97054b11ef7c

    • SSDEEP

      6144:0Lf6yK4bOhYCo0b5CvEta++7tNeepwP7LpZU1u4vrBvnqJN2W:0Dhhb85U+a+wT4LfU1u4vN8N

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks