General

  • Target

    abe48f60c5ce2234904263038d9abddd_JaffaCakes118

  • Size

    3.2MB

  • Sample

    240819-vwpmbawfqa

  • MD5

    abe48f60c5ce2234904263038d9abddd

  • SHA1

    57f67b974a373ede2be45fd2def773bc41bb0944

  • SHA256

    fadcd07cbf9655c81a2ea038369eb439daedcc4bf26d6a50cc43a4b916ae6ad9

  • SHA512

    8b37a04b8ce23ad932cf76513f63f1269bbcb1d1f75667b0842f3ec3a2d47cd8770cb54be4a18e951d35d395b81b71ca1af322ea138c71dce791d387e467cf22

  • SSDEEP

    98304:AQI0xIZtkIDcakc2NolDFBLwIYcakcOlvousFsnRu2h1H6cakc2NolDFBLwIYcaw:W0iZuYdl2N0B0IYdlsgiRu2h1H6dl2N2

Score
7/10

Malware Config

Targets

    • Target

      abe48f60c5ce2234904263038d9abddd_JaffaCakes118

    • Size

      3.2MB

    • MD5

      abe48f60c5ce2234904263038d9abddd

    • SHA1

      57f67b974a373ede2be45fd2def773bc41bb0944

    • SHA256

      fadcd07cbf9655c81a2ea038369eb439daedcc4bf26d6a50cc43a4b916ae6ad9

    • SHA512

      8b37a04b8ce23ad932cf76513f63f1269bbcb1d1f75667b0842f3ec3a2d47cd8770cb54be4a18e951d35d395b81b71ca1af322ea138c71dce791d387e467cf22

    • SSDEEP

      98304:AQI0xIZtkIDcakc2NolDFBLwIYcakcOlvousFsnRu2h1H6cakc2NolDFBLwIYcaw:W0iZuYdl2N0B0IYdlsgiRu2h1H6dl2N2

    Score
    7/10
    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks