General

  • Target

    ed2170e68f437244fe76e264df397fc1_JaffaCakes118

  • Size

    524KB

  • Sample

    240920-jk4fjswajd

  • MD5

    ed2170e68f437244fe76e264df397fc1

  • SHA1

    3d6a6929891277c811c0cb40d1ddabd4d06b2e0b

  • SHA256

    d298f50a493dafab4f2fa5dac326351736766d5ec2b224f5e4026938b8525bdd

  • SHA512

    6be4ec483cac6c74c687491fbcba59378da1940fcc8a29abee7e90d6ce3293aa4fab9904d1384424f7c500af75272dd9af35176dfc15ab77f992272cbe23d762

  • SSDEEP

    12288:s7fVAshSdovmVGB7SLCY1J1kGl8V3eZsemDhkJy:fISd7VG96r1/kGlVZshDhwy

Malware Config

Targets

    • Target

      ed2170e68f437244fe76e264df397fc1_JaffaCakes118

    • Size

      524KB

    • MD5

      ed2170e68f437244fe76e264df397fc1

    • SHA1

      3d6a6929891277c811c0cb40d1ddabd4d06b2e0b

    • SHA256

      d298f50a493dafab4f2fa5dac326351736766d5ec2b224f5e4026938b8525bdd

    • SHA512

      6be4ec483cac6c74c687491fbcba59378da1940fcc8a29abee7e90d6ce3293aa4fab9904d1384424f7c500af75272dd9af35176dfc15ab77f992272cbe23d762

    • SSDEEP

      12288:s7fVAshSdovmVGB7SLCY1J1kGl8V3eZsemDhkJy:fISd7VG96r1/kGlVZshDhwy

    • Kutaki

      Information stealer and keylogger that hides inside legitimate Visual Basic applications.

    • Kutaki Executable

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks