General

  • Target

    fc4ad6b4d0a8db60a020d503df86ede9_JaffaCakes118

  • Size

    99KB

  • Sample

    240928-plxmaawapm

  • MD5

    fc4ad6b4d0a8db60a020d503df86ede9

  • SHA1

    d64f7a7fbdefca6b0abfd033bbb5577d00c6e822

  • SHA256

    657f565e5bcc8870c4bfd502953d378d22e0fe971cb0a05f920b11820eebd713

  • SHA512

    ca523cd7fae4a4c9d6268a80e0a1a25cd9f7de9fae6f1588d357c29aaa72f2bb0d728aabe91ded36adcff23bf94af34dac0442d4df7d542c7806b8271e1af27a

  • SSDEEP

    1536:QvNGltx6zxhJESLTnlXHMzSWF1VGHvhy7ApFKiBeSiLS1U1sKB1ZS2Vdf7:UNGlj29LTlovF1VswAL1fq1wif

Malware Config

Extracted

Family

systembc

C2

194.61.24.117

Targets

    • Target

      fc4ad6b4d0a8db60a020d503df86ede9_JaffaCakes118

    • Size

      99KB

    • MD5

      fc4ad6b4d0a8db60a020d503df86ede9

    • SHA1

      d64f7a7fbdefca6b0abfd033bbb5577d00c6e822

    • SHA256

      657f565e5bcc8870c4bfd502953d378d22e0fe971cb0a05f920b11820eebd713

    • SHA512

      ca523cd7fae4a4c9d6268a80e0a1a25cd9f7de9fae6f1588d357c29aaa72f2bb0d728aabe91ded36adcff23bf94af34dac0442d4df7d542c7806b8271e1af27a

    • SSDEEP

      1536:QvNGltx6zxhJESLTnlXHMzSWF1VGHvhy7ApFKiBeSiLS1U1sKB1ZS2Vdf7:UNGlj29LTlovF1VswAL1fq1wif

    • SystemBC

      SystemBC is a proxy and remote administration tool first seen in 2019.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks