General

  • Target

    ae13613057898c5020dd43ec873c371f_JaffaCakes118

  • Size

    5.1MB

  • Sample

    240820-gf3x4swdke

  • MD5

    ae13613057898c5020dd43ec873c371f

  • SHA1

    08b605bad9bda2e8240647d0f8a65af8bd92b10c

  • SHA256

    109bb3decbbcc069b57fe7aac65c019991c2fcffac9adb96a82539645267537d

  • SHA512

    820455b1dc86bdb39378743c14a828e2d32ef5edade40a5774256274c60e0aae18f0db086f067fa0da9fc4665e5d35e274e2fb7199e41b576d700ec2f48fbb46

  • SSDEEP

    98304:NoC7BjebdvQvhiNsHK94NAct6+EdxscBNa1877M8EZboj2K0IBLRQ:rBwKiNsE42WEbBgr8KojWIBLRQ

Malware Config

Targets

    • Target

      ae13613057898c5020dd43ec873c371f_JaffaCakes118

    • Size

      5.1MB

    • MD5

      ae13613057898c5020dd43ec873c371f

    • SHA1

      08b605bad9bda2e8240647d0f8a65af8bd92b10c

    • SHA256

      109bb3decbbcc069b57fe7aac65c019991c2fcffac9adb96a82539645267537d

    • SHA512

      820455b1dc86bdb39378743c14a828e2d32ef5edade40a5774256274c60e0aae18f0db086f067fa0da9fc4665e5d35e274e2fb7199e41b576d700ec2f48fbb46

    • SSDEEP

      98304:NoC7BjebdvQvhiNsHK94NAct6+EdxscBNa1877M8EZboj2K0IBLRQ:rBwKiNsE42WEbBgr8KojWIBLRQ

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks