General

  • Target

    d494df1152d1411f473c423482d14a9f_JaffaCakes118

  • Size

    107KB

  • Sample

    240908-ry4bpstdqg

  • MD5

    d494df1152d1411f473c423482d14a9f

  • SHA1

    b3d1dd036a011038999c311445ebd7d75fed0c63

  • SHA256

    1cedcf44e5a84003594d9d463f56663f8d49b330a3ee9de1d1580e66e3991d08

  • SHA512

    86e15f5e280cd7365b6dd63044a2747d11e5c56df04af162035f9e07889b87810e2f80764d65b7e4d7e36ea6e0ccde1cc6798cabdc8e67f02ce1b4a1254ee1b4

  • SSDEEP

    3072:yaUGwDRXvZgFGgU9MGBRasLehuWLs+8lRo+36XE8gC:y/xR/GFG9nLiuWLs/qU8gC

Malware Config

Extracted

Family

systembc

C2

91.243.82.99

Attributes
  • dns

    5.132.191.104

    92.163.33.248

    206.189.120.27

Targets

    • Target

      d494df1152d1411f473c423482d14a9f_JaffaCakes118

    • Size

      107KB

    • MD5

      d494df1152d1411f473c423482d14a9f

    • SHA1

      b3d1dd036a011038999c311445ebd7d75fed0c63

    • SHA256

      1cedcf44e5a84003594d9d463f56663f8d49b330a3ee9de1d1580e66e3991d08

    • SHA512

      86e15f5e280cd7365b6dd63044a2747d11e5c56df04af162035f9e07889b87810e2f80764d65b7e4d7e36ea6e0ccde1cc6798cabdc8e67f02ce1b4a1254ee1b4

    • SSDEEP

      3072:yaUGwDRXvZgFGgU9MGBRasLehuWLs+8lRo+36XE8gC:y/xR/GFG9nLiuWLs/qU8gC

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks