General

  • Target

    fba23ff1834097c080667bfc8812e978_JaffaCakes118

  • Size

    638KB

  • Sample

    240928-glkcyszerl

  • MD5

    fba23ff1834097c080667bfc8812e978

  • SHA1

    8040cc90fb108798f4a6d0c24db8a741877d3ce6

  • SHA256

    9ed38ff0b069da0701ea694c35aeb50af870035357772d13d88778c01a975925

  • SHA512

    0b8baf1424138e17acd63566fbd8054c6d4e97436cc0bb72244d8195d401602b86c49cdc6db69baf9d4a79d97ea2d2eab453ed45bbbc4dd7c1296279c66d9645

  • SSDEEP

    12288:pNweqfjaIIU66siGDBdmoi/QF3Z4mxxO+QryWXYCvWgyp0:nwXfja5UzsikBoGQmXO+QZvv80

Malware Config

Targets

    • Target

      fba23ff1834097c080667bfc8812e978_JaffaCakes118

    • Size

      638KB

    • MD5

      fba23ff1834097c080667bfc8812e978

    • SHA1

      8040cc90fb108798f4a6d0c24db8a741877d3ce6

    • SHA256

      9ed38ff0b069da0701ea694c35aeb50af870035357772d13d88778c01a975925

    • SHA512

      0b8baf1424138e17acd63566fbd8054c6d4e97436cc0bb72244d8195d401602b86c49cdc6db69baf9d4a79d97ea2d2eab453ed45bbbc4dd7c1296279c66d9645

    • SSDEEP

      12288:pNweqfjaIIU66siGDBdmoi/QF3Z4mxxO+QryWXYCvWgyp0:nwXfja5UzsikBoGQmXO+QZvv80

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks