General

  • Target

    fc3bdefc15b9e170ef5cadd4ad8358ef_JaffaCakes118

  • Size

    126KB

  • Sample

    240928-nw6r9sxale

  • MD5

    fc3bdefc15b9e170ef5cadd4ad8358ef

  • SHA1

    61e0cca1edbfe2e0ee5f91c52913810f429a41fd

  • SHA256

    36ca69fe3136e236d5015c63699560e2da97192d31d0229a620312b5b741c483

  • SHA512

    d00084c5329b98ff3dd4657106fb18ee197e85f502c42a1dd7539b675af9cbc24045e9709b9267e16c2d86ba491f88734623936067dc84b1c874025d1c8823e0

  • SSDEEP

    3072:3LnMdyZhveQTVC/KVtj8EncYza0Ch29eTlcsn:3LnuChGQC/st4Ey2Olcs

Malware Config

Targets

    • Target

      fc3bdefc15b9e170ef5cadd4ad8358ef_JaffaCakes118

    • Size

      126KB

    • MD5

      fc3bdefc15b9e170ef5cadd4ad8358ef

    • SHA1

      61e0cca1edbfe2e0ee5f91c52913810f429a41fd

    • SHA256

      36ca69fe3136e236d5015c63699560e2da97192d31d0229a620312b5b741c483

    • SHA512

      d00084c5329b98ff3dd4657106fb18ee197e85f502c42a1dd7539b675af9cbc24045e9709b9267e16c2d86ba491f88734623936067dc84b1c874025d1c8823e0

    • SSDEEP

      3072:3LnMdyZhveQTVC/KVtj8EncYza0Ch29eTlcsn:3LnuChGQC/st4Ey2Olcs

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Executes dropped EXE

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks