General

  • Target

    c7d98405196f1a59f1175f884be09f50_JaffaCakes118

  • Size

    118KB

  • Sample

    240828-3k15zascpf

  • MD5

    c7d98405196f1a59f1175f884be09f50

  • SHA1

    770c125f6d2c1f94dd391f704ca3a28553a396fd

  • SHA256

    aba120df52f983ac2e462b9b2d9fb1b1bde3014e879241a2a441dfff8ec687ad

  • SHA512

    eea0a6c564172030a65218b87f2ad151bc4c918f545c025c49c8bd74908a9c39d6ddbf73925994a4c1cf557adaf8a7263e55a580972325f0fe230a96ff8133a3

  • SSDEEP

    1536:7CDDS7LFiLjnavBSsOnOonMaPJtSNBeAt+3UEnouy8wfm06g:QIFYjnav4bnOAMaWeAt+3U0outa2

Malware Config

Targets

    • Target

      c7d98405196f1a59f1175f884be09f50_JaffaCakes118

    • Size

      118KB

    • MD5

      c7d98405196f1a59f1175f884be09f50

    • SHA1

      770c125f6d2c1f94dd391f704ca3a28553a396fd

    • SHA256

      aba120df52f983ac2e462b9b2d9fb1b1bde3014e879241a2a441dfff8ec687ad

    • SHA512

      eea0a6c564172030a65218b87f2ad151bc4c918f545c025c49c8bd74908a9c39d6ddbf73925994a4c1cf557adaf8a7263e55a580972325f0fe230a96ff8133a3

    • SSDEEP

      1536:7CDDS7LFiLjnavBSsOnOonMaPJtSNBeAt+3UEnouy8wfm06g:QIFYjnav4bnOAMaWeAt+3U0outa2

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks