General

  • Target

    b356d64e3b71c5d9e91611000586b782_JaffaCakes118

  • Size

    97KB

  • Sample

    240821-nx33rswgrb

  • MD5

    b356d64e3b71c5d9e91611000586b782

  • SHA1

    1b1a1bfd8fde86aa197bf2abc1c20ac6d5631119

  • SHA256

    a5f7de485d272cc655924f82155f0aae76adb52e9ccd88f778c45fa3548127b5

  • SHA512

    e1f4b6f6955c3849ef42214f1e5bb2621315aa9223e386cd7ecb8895f87b42c3c8574abd7de0d808f85ece33e78fd7405909c024c91266b49e3137e78fead573

  • SSDEEP

    1536:xEpQXt32aWK1oIYr49S9mXPy3QDF9RHgfHZ/9qqb/xKH3nZx2pYir:xFXtRDSMK3QDF9RAfH59q2u372W6

Malware Config

Targets

    • Target

      b356d64e3b71c5d9e91611000586b782_JaffaCakes118

    • Size

      97KB

    • MD5

      b356d64e3b71c5d9e91611000586b782

    • SHA1

      1b1a1bfd8fde86aa197bf2abc1c20ac6d5631119

    • SHA256

      a5f7de485d272cc655924f82155f0aae76adb52e9ccd88f778c45fa3548127b5

    • SHA512

      e1f4b6f6955c3849ef42214f1e5bb2621315aa9223e386cd7ecb8895f87b42c3c8574abd7de0d808f85ece33e78fd7405909c024c91266b49e3137e78fead573

    • SSDEEP

      1536:xEpQXt32aWK1oIYr49S9mXPy3QDF9RHgfHZ/9qqb/xKH3nZx2pYir:xFXtRDSMK3QDF9RAfH59q2u372W6

    • Adds Run key to start application

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks