General

  • Target

    fcf2de95d27b7acf10856983381a87a2_JaffaCakes118

  • Size

    16KB

  • Sample

    240928-xpgn8sthne

  • MD5

    fcf2de95d27b7acf10856983381a87a2

  • SHA1

    e0c21fb2160cdec2ac043cf9a6b07435e6444e59

  • SHA256

    830801fe1b0fa7172c14f185a9976551e94fc534de18ba697f3a7cfd23db6dae

  • SHA512

    7de17a11685d61690596b506ac9b96c0dfdba77a5a1188141c2d2f97092464406c46fe9af06e9ab57c35c680d94d28fb956ba27e4dc3072aa0b8118f1826a233

  • SSDEEP

    384:7RH/+zKpzUc59yu8DHrcWZuOqiIjv1Be:7J+zIzRXt8DHg0qjN

Malware Config

Targets

    • Target

      fcf2de95d27b7acf10856983381a87a2_JaffaCakes118

    • Size

      16KB

    • MD5

      fcf2de95d27b7acf10856983381a87a2

    • SHA1

      e0c21fb2160cdec2ac043cf9a6b07435e6444e59

    • SHA256

      830801fe1b0fa7172c14f185a9976551e94fc534de18ba697f3a7cfd23db6dae

    • SHA512

      7de17a11685d61690596b506ac9b96c0dfdba77a5a1188141c2d2f97092464406c46fe9af06e9ab57c35c680d94d28fb956ba27e4dc3072aa0b8118f1826a233

    • SSDEEP

      384:7RH/+zKpzUc59yu8DHrcWZuOqiIjv1Be:7J+zIzRXt8DHg0qjN

    • Adds Run key to start application

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks