General

  • Target

    acce18b19ecaeeb7f35fc732db68abcc_JaffaCakes118

  • Size

    324KB

  • Sample

    240819-18ldbasfnk

  • MD5

    acce18b19ecaeeb7f35fc732db68abcc

  • SHA1

    c9194149e250112d561cc6d663e34f38962440c6

  • SHA256

    ac2cd5880beac4628582eefe10067fe626466c6bae8d8d0f586beba33ed85195

  • SHA512

    7912b7b924caf078c9ee5cb1680ee8101cc9ba6a731899726a980336cff08a40e951d5d95940f734bd74ab3f263fefd9e19a16bee0c61569dd1b6187b1597306

  • SSDEEP

    6144:vzNL+hfF1NLOy1egK8z417N/btCMDZPHxFCg9byo6SwIVDAHV:rhyVLOy1Gsu7dbIMDXThyeDAHV

Malware Config

Targets

    • Target

      acce18b19ecaeeb7f35fc732db68abcc_JaffaCakes118

    • Size

      324KB

    • MD5

      acce18b19ecaeeb7f35fc732db68abcc

    • SHA1

      c9194149e250112d561cc6d663e34f38962440c6

    • SHA256

      ac2cd5880beac4628582eefe10067fe626466c6bae8d8d0f586beba33ed85195

    • SHA512

      7912b7b924caf078c9ee5cb1680ee8101cc9ba6a731899726a980336cff08a40e951d5d95940f734bd74ab3f263fefd9e19a16bee0c61569dd1b6187b1597306

    • SSDEEP

      6144:vzNL+hfF1NLOy1egK8z417N/btCMDZPHxFCg9byo6SwIVDAHV:rhyVLOy1Gsu7dbIMDXThyeDAHV

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks