General

  • Target

    b1082543f7ab7fa741daa3c7e57c7aea_JaffaCakes118

  • Size

    37KB

  • Sample

    240820-13ectazcqp

  • MD5

    b1082543f7ab7fa741daa3c7e57c7aea

  • SHA1

    74c919d658415e7d74ead5f4c06c1229b3850c1d

  • SHA256

    27e85abf745edb11e28517a7bee394bfc089a175be4ffff72fc37776319f6a4a

  • SHA512

    95916681bb0885dc503c8beeb47965ae10c2402becedc81d5af61a6287a396eda46a62754bf8e097d555aa23568a35dc8515e3dfa10b59e1507bae03a2160305

  • SSDEEP

    768:zi7zz6qf/ysLd0dkpkvjHie9Mz5xgEyG6IYKvEtCe:ziPzMsLd0EwDH83iivUCe

Malware Config

Targets

    • Target

      b1082543f7ab7fa741daa3c7e57c7aea_JaffaCakes118

    • Size

      37KB

    • MD5

      b1082543f7ab7fa741daa3c7e57c7aea

    • SHA1

      74c919d658415e7d74ead5f4c06c1229b3850c1d

    • SHA256

      27e85abf745edb11e28517a7bee394bfc089a175be4ffff72fc37776319f6a4a

    • SHA512

      95916681bb0885dc503c8beeb47965ae10c2402becedc81d5af61a6287a396eda46a62754bf8e097d555aa23568a35dc8515e3dfa10b59e1507bae03a2160305

    • SSDEEP

      768:zi7zz6qf/ysLd0dkpkvjHie9Mz5xgEyG6IYKvEtCe:ziPzMsLd0EwDH83iivUCe

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks