General

  • Target

    ae26230af51412af2914f2b75f56bca2_JaffaCakes118

  • Size

    119KB

  • Sample

    240820-gysj4axbpd

  • MD5

    ae26230af51412af2914f2b75f56bca2

  • SHA1

    0c8cae26c4d376e9cf1810f9ad63a4a41df0cc44

  • SHA256

    2859e3230a12fa6b1797ea84efb2ba17baa432b8208b22b1e78b6d9ecf2c2e9f

  • SHA512

    e6acef4b4167d2a62ecc7907b426194f029994e0a77d1b314a9b5e8d1a6af17a2230aaa508359fc33d1088901d0df0c89c2fe82c6a87b25d5ed6e999ff07d4b6

  • SSDEEP

    3072:tg1noG1Gz1dHxgdSGFBp2h/GGY/TYly8wVdJan:G1nz1mRgd5FBp2h/HYclyda

Malware Config

Targets

    • Target

      ae26230af51412af2914f2b75f56bca2_JaffaCakes118

    • Size

      119KB

    • MD5

      ae26230af51412af2914f2b75f56bca2

    • SHA1

      0c8cae26c4d376e9cf1810f9ad63a4a41df0cc44

    • SHA256

      2859e3230a12fa6b1797ea84efb2ba17baa432b8208b22b1e78b6d9ecf2c2e9f

    • SHA512

      e6acef4b4167d2a62ecc7907b426194f029994e0a77d1b314a9b5e8d1a6af17a2230aaa508359fc33d1088901d0df0c89c2fe82c6a87b25d5ed6e999ff07d4b6

    • SSDEEP

      3072:tg1noG1Gz1dHxgdSGFBp2h/GGY/TYly8wVdJan:G1nz1mRgd5FBp2h/HYclyda

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Executes dropped EXE

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks