General

  • Target

    0842c2e63bb908e2dd0515d09e84cba6_JaffaCakes118

  • Size

    100KB

  • Sample

    241002-bw866szhkm

  • MD5

    0842c2e63bb908e2dd0515d09e84cba6

  • SHA1

    276fd997d4a91681b6da0c99ec83e1e78b1f8681

  • SHA256

    6a30a05d74ec67cea513d16f35de0b21395f95cd37e74650fe1adf1eb4953aab

  • SHA512

    e6f31b128859cb1018ccd1a1fa62f0298f085b61e69cb7c61a69246d5681435dba4ab57e7f2b4d82bc5b663d5891511e2bcfa59b3d278b461fc3c876357e5c67

  • SSDEEP

    3072:mAl5hDxMWid0MaWvcexkRNeMO/0kI1FiSZj:HzD58UheSRNeMOMR1ASh

Malware Config

Targets

    • Target

      0842c2e63bb908e2dd0515d09e84cba6_JaffaCakes118

    • Size

      100KB

    • MD5

      0842c2e63bb908e2dd0515d09e84cba6

    • SHA1

      276fd997d4a91681b6da0c99ec83e1e78b1f8681

    • SHA256

      6a30a05d74ec67cea513d16f35de0b21395f95cd37e74650fe1adf1eb4953aab

    • SHA512

      e6f31b128859cb1018ccd1a1fa62f0298f085b61e69cb7c61a69246d5681435dba4ab57e7f2b4d82bc5b663d5891511e2bcfa59b3d278b461fc3c876357e5c67

    • SSDEEP

      3072:mAl5hDxMWid0MaWvcexkRNeMO/0kI1FiSZj:HzD58UheSRNeMOMR1ASh

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks