General

  • Target

    874936384701b6359006d28900dffa63_JaffaCakes118

  • Size

    559KB

  • Sample

    240810-xp52tsxdpe

  • MD5

    874936384701b6359006d28900dffa63

  • SHA1

    702b46c388049274087d8f4d245e2ec8b41c5175

  • SHA256

    9b01933622127516bfc2ce94d3e37c9d9c4fb82a8e3b1536683c59585c0aca77

  • SHA512

    ebccdf2bcc9ac75307f3a5a9b963b6de1c83de8225fc217b170afd40f88e383e54788cd8e0ec63c007d81bf2f118ad8e2066a13e56e5ad3ec69c289b6e56ea69

  • SSDEEP

    12288:pWkJdJdWQaykdZMd0fDqCeN8QUsUD+OBKfHRzFEzsru7l2qN:bfzXMDfpw4D+LHRzFAsruVN

Malware Config

Targets

    • Target

      halfguideon.dll

    • Size

      576KB

    • MD5

      3c5dd12ee0ca6f96a7080540548499fd

    • SHA1

      4708a00710b35a3121ddd8321ead222b5e23b22d

    • SHA256

      705b61d560f34a54f66ec963957a033d5de7377c5b81aec187bfe0ce453c0ddd

    • SHA512

      50ef569ac1867e01a3efd9b66617d3aaf9890bd461f091e0c0f385fd40955df6ba0ba299d825ec8169054024cd1f17ca93611d090d2df0c122e47fba7c2ad9e0

    • SSDEEP

      12288:yuxivUHqKj8erDCwQsgGW8aR3gW5mnUUm4gAcO:yKkS8QtB3Mv4Uv

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Target

      halfguideonuninst.exe

    • Size

      566KB

    • MD5

      fe594afa30038e850fad4fb35cad812c

    • SHA1

      ec42bd7ecaa4f2e8ad5807a5c1857e50141b9d4b

    • SHA256

      870c3fcdaeca37a01eba1f2407b1039988834844d5336af01ca1b721987e509f

    • SHA512

      518f81a09371e0e1bfa94c4a81c41d2eb13b39de94e930d8c924eb565544c71eddf166afe805c74d7b450e59b4ba99f7025ba0897113273a3b1160ad68426bd6

    • SSDEEP

      12288:JqSeOTosGnY/5lwLKwIDjeVyzMmLDJxWvu/T:JdNGnY/5KAOV9mLFxWvu

    Score
    4/10

MITRE ATT&CK Enterprise v15

Tasks