General

  • Target

    bfc14dcb03ac7ee019c4a6b2db04d6d9_JaffaCakes118

  • Size

    88KB

  • Sample

    240825-as3dsaybjd

  • MD5

    bfc14dcb03ac7ee019c4a6b2db04d6d9

  • SHA1

    e25641af854280c3a46b2b8194003d20609650d9

  • SHA256

    5b4266c71ea93a1aa30f6e198c4f8729414036718a02052702447a3e37d3994b

  • SHA512

    37713582e69c019509cf5f380ba0b2f1f1477795b6e870fbc61a62e0dc5d47130a269af3936ce1f6345b919947e10bc37a624d024cdabee60ac56afe9fae1b28

  • SSDEEP

    768:OaAffm4goD1Cc9LJk3BMSaJUeUiVIcj7jgzQzTGfl:Lefmq1fuRMSaJUeUcjngzQY

Malware Config

Targets

    • Target

      bfc14dcb03ac7ee019c4a6b2db04d6d9_JaffaCakes118

    • Size

      88KB

    • MD5

      bfc14dcb03ac7ee019c4a6b2db04d6d9

    • SHA1

      e25641af854280c3a46b2b8194003d20609650d9

    • SHA256

      5b4266c71ea93a1aa30f6e198c4f8729414036718a02052702447a3e37d3994b

    • SHA512

      37713582e69c019509cf5f380ba0b2f1f1477795b6e870fbc61a62e0dc5d47130a269af3936ce1f6345b919947e10bc37a624d024cdabee60ac56afe9fae1b28

    • SSDEEP

      768:OaAffm4goD1Cc9LJk3BMSaJUeUiVIcj7jgzQzTGfl:Lefmq1fuRMSaJUeUcjngzQY

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Deletes itself

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks