General

  • Target

    c92b7cdc78a3d9d64aeb7063172d83ad_JaffaCakes118

  • Size

    473KB

  • Sample

    240829-tqzpnasdlq

  • MD5

    c92b7cdc78a3d9d64aeb7063172d83ad

  • SHA1

    2d41a6091e06188a85e2d7639d38b474eebcd765

  • SHA256

    2a08156cc0744c144243bf0327d388d9c872c780b5a8e877a02a1c1b9ae156d2

  • SHA512

    a83fb4fe3066f8289e07179076738bce4299858caeabbdcd1e13c70be3ed7b791910fd249b325e91bfbb0d6e9511a5197e2029a7dcba503b580c36508aab930c

  • SSDEEP

    12288:HnuB5G1M6QQ3icvwzJEMuaBGHg21hLxjG6DTKN:HnjV4VEXa0BLMYTS

Malware Config

Targets

    • Target

      c92b7cdc78a3d9d64aeb7063172d83ad_JaffaCakes118

    • Size

      473KB

    • MD5

      c92b7cdc78a3d9d64aeb7063172d83ad

    • SHA1

      2d41a6091e06188a85e2d7639d38b474eebcd765

    • SHA256

      2a08156cc0744c144243bf0327d388d9c872c780b5a8e877a02a1c1b9ae156d2

    • SHA512

      a83fb4fe3066f8289e07179076738bce4299858caeabbdcd1e13c70be3ed7b791910fd249b325e91bfbb0d6e9511a5197e2029a7dcba503b580c36508aab930c

    • SSDEEP

      12288:HnuB5G1M6QQ3icvwzJEMuaBGHg21hLxjG6DTKN:HnjV4VEXa0BLMYTS

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Modifies init.d

      Adds/modifies system service, likely for persistence.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Write file to user bin folder

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks