General

  • Target

    b5c33574ede3fe6c66ddf5ac4f97bdb4_JaffaCakes118

  • Size

    229KB

  • Sample

    240822-bg2hsathlj

  • MD5

    b5c33574ede3fe6c66ddf5ac4f97bdb4

  • SHA1

    93af4cb252c83d747e4e512a2fee331235505f54

  • SHA256

    20d2f5cb3a67719858b8c050ed758bb8a0d4e96490d421d096eba52a50d4a881

  • SHA512

    2a3809d980461045af2e8515f6c06903cfc43022ca9ffbb4790477b143b7803b04baf356bbd2e7688be81a92d81b15568580b8cecfc92ee60f916f40447ec255

  • SSDEEP

    6144:AU+5/lX1Bn+aC1meyUGimMK4IrxGsu/CzUI:GdzW1meyUGphDxGsuQUI

Malware Config

Targets

    • Target

      b5c33574ede3fe6c66ddf5ac4f97bdb4_JaffaCakes118

    • Size

      229KB

    • MD5

      b5c33574ede3fe6c66ddf5ac4f97bdb4

    • SHA1

      93af4cb252c83d747e4e512a2fee331235505f54

    • SHA256

      20d2f5cb3a67719858b8c050ed758bb8a0d4e96490d421d096eba52a50d4a881

    • SHA512

      2a3809d980461045af2e8515f6c06903cfc43022ca9ffbb4790477b143b7803b04baf356bbd2e7688be81a92d81b15568580b8cecfc92ee60f916f40447ec255

    • SSDEEP

      6144:AU+5/lX1Bn+aC1meyUGimMK4IrxGsu/CzUI:GdzW1meyUGphDxGsuQUI

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks