General

  • Target

    dbbabc7284803b37c50570e108708687_JaffaCakes118

  • Size

    3.3MB

  • Sample

    240912-d1jhesygmc

  • MD5

    dbbabc7284803b37c50570e108708687

  • SHA1

    d1a6044c05dbf0e326999201c72e005b4cf95417

  • SHA256

    9518a4ca076ec9339d6fee8df890e34e291a778756bad1765dacdc5c97963500

  • SHA512

    aec0de0a019acf49df65e4a304150b6d79a374678dcbe17260b5ed4232cbb58477d720e6363896d5e2ec448bd2440679e927f59e59cb3254e6cf54d8c4504227

  • SSDEEP

    98304:tq3EoG9eb2cuidK6XvwLOEUwo09YbiW1j/ry:U3EoG9equ5I927b71re

Score
7/10

Malware Config

Targets

    • Target

      dbbabc7284803b37c50570e108708687_JaffaCakes118

    • Size

      3.3MB

    • MD5

      dbbabc7284803b37c50570e108708687

    • SHA1

      d1a6044c05dbf0e326999201c72e005b4cf95417

    • SHA256

      9518a4ca076ec9339d6fee8df890e34e291a778756bad1765dacdc5c97963500

    • SHA512

      aec0de0a019acf49df65e4a304150b6d79a374678dcbe17260b5ed4232cbb58477d720e6363896d5e2ec448bd2440679e927f59e59cb3254e6cf54d8c4504227

    • SSDEEP

      98304:tq3EoG9eb2cuidK6XvwLOEUwo09YbiW1j/ry:U3EoG9equ5I927b71re

    Score
    7/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks