General

  • Target

    bb10ae274a261e335f62dabba65bba62_JaffaCakes118

  • Size

    3.3MB

  • Sample

    240823-kr54dsvbrb

  • MD5

    bb10ae274a261e335f62dabba65bba62

  • SHA1

    8b4f6cc2a1cbc7a40a192d18da05906761e0d161

  • SHA256

    a0723d39c36bced9e97672b86461e67c25d2159c9c2197f25a8735df01864a80

  • SHA512

    59d2a5dc181a919f609938b751e287af6e7573606788addf11a424a520758b9c076bde3153cfe32b6ccef0c0ff004db64941cf239069620dc7ea6ce6a98e103a

  • SSDEEP

    98304:ck5HDykWXgoh6c0IR3F1LxRO4b7+R/QKxkmmN:P5jRWXgohL11pxRhH+jQ

Malware Config

Targets

    • Target

      bb10ae274a261e335f62dabba65bba62_JaffaCakes118

    • Size

      3.3MB

    • MD5

      bb10ae274a261e335f62dabba65bba62

    • SHA1

      8b4f6cc2a1cbc7a40a192d18da05906761e0d161

    • SHA256

      a0723d39c36bced9e97672b86461e67c25d2159c9c2197f25a8735df01864a80

    • SHA512

      59d2a5dc181a919f609938b751e287af6e7573606788addf11a424a520758b9c076bde3153cfe32b6ccef0c0ff004db64941cf239069620dc7ea6ce6a98e103a

    • SSDEEP

      98304:ck5HDykWXgoh6c0IR3F1LxRO4b7+R/QKxkmmN:P5jRWXgohL11pxRhH+jQ

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks