General

  • Target

    b72e4533f36a6fb37a29b24804fe451e_JaffaCakes118

  • Size

    27KB

  • Sample

    240822-lt91sszfnb

  • MD5

    b72e4533f36a6fb37a29b24804fe451e

  • SHA1

    953076ec3aa17e4c8ca4a3639f0965ec60830741

  • SHA256

    4446f2d1b4e15f957e5f6ae244de4bc7fb9ad21b8d5ea5bcb4c4c1713e0a5c92

  • SHA512

    efd8df65f33c592170a396ec090bc1680d9ce5e288f78a0ce8070605b22afe42556c6f240c117b51d3b68b1d76bcb6ad829518e7ee59e784aeb0327fbe20ebd5

  • SSDEEP

    384:XZtQH4YtOpZmRShIZpf3pZX/gMHmY5nygbYjmlTmHyyXbzXvZmgxaX9U:/VuvzXXHHbYjmoHLXvXvZu

Malware Config

Targets

    • Target

      b72e4533f36a6fb37a29b24804fe451e_JaffaCakes118

    • Size

      27KB

    • MD5

      b72e4533f36a6fb37a29b24804fe451e

    • SHA1

      953076ec3aa17e4c8ca4a3639f0965ec60830741

    • SHA256

      4446f2d1b4e15f957e5f6ae244de4bc7fb9ad21b8d5ea5bcb4c4c1713e0a5c92

    • SHA512

      efd8df65f33c592170a396ec090bc1680d9ce5e288f78a0ce8070605b22afe42556c6f240c117b51d3b68b1d76bcb6ad829518e7ee59e784aeb0327fbe20ebd5

    • SSDEEP

      384:XZtQH4YtOpZmRShIZpf3pZX/gMHmY5nygbYjmlTmHyyXbzXvZmgxaX9U:/VuvzXXHHbYjmoHLXvXvZu

    • Adds Run key to start application

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks