General

  • Target

    c24ac9607157a999f2ae384bf827e6d4_JaffaCakes118

  • Size

    413KB

  • Sample

    240826-e7tseavgjh

  • MD5

    c24ac9607157a999f2ae384bf827e6d4

  • SHA1

    1b6ae3e843331c77631996295682c74c71e49160

  • SHA256

    8ac71c52265341fb67ffbfaf1473e93fc879a41f7e825c860884befd96304163

  • SHA512

    8a980f8a3f90ea75e839d013dd030c6e26b92455dfcd6e1fddd0b3907a2b551e14fdb5a9528c91addc0ac28485d81480dd434a116a6592f5c31f1f4b7f61ccfc

  • SSDEEP

    12288:Jw1jclCV3Li09zDTBmhSoOga8E+yVCcor:Gpn3g4oOgNEAH

Malware Config

Targets

    • Target

      c24ac9607157a999f2ae384bf827e6d4_JaffaCakes118

    • Size

      413KB

    • MD5

      c24ac9607157a999f2ae384bf827e6d4

    • SHA1

      1b6ae3e843331c77631996295682c74c71e49160

    • SHA256

      8ac71c52265341fb67ffbfaf1473e93fc879a41f7e825c860884befd96304163

    • SHA512

      8a980f8a3f90ea75e839d013dd030c6e26b92455dfcd6e1fddd0b3907a2b551e14fdb5a9528c91addc0ac28485d81480dd434a116a6592f5c31f1f4b7f61ccfc

    • SSDEEP

      12288:Jw1jclCV3Li09zDTBmhSoOga8E+yVCcor:Gpn3g4oOgNEAH

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks