General

  • Target

    0b8dcd2984d0b8d176058ef6fc142a02_JaffaCakes118

  • Size

    129KB

  • Sample

    241002-tvrvlswbpk

  • MD5

    0b8dcd2984d0b8d176058ef6fc142a02

  • SHA1

    2d87762d2abdaab782d6e5b05e121bf071c25bd7

  • SHA256

    0e46f52f39386711f936faa3bf3d9dd2e4ec99d65a2a391f02957eb0074d020d

  • SHA512

    9cdd66f7cdc0352f598dffa0f507a0214050bfab510e7b6bf1e83135283bdbd0bd1c48d8fc749fe5f69d1e70f7ac87a35169ac4da027550998fd0f1f2dc4c593

  • SSDEEP

    3072:NF/WZRnp8OcnnnnnCyk+RZz0gOVE5FZSFfWLLeSONHxgnn0QFm3fQnnnnnnc6B:jWZDSRlFaWLLe/x

Malware Config

Targets

    • Target

      0b8dcd2984d0b8d176058ef6fc142a02_JaffaCakes118

    • Size

      129KB

    • MD5

      0b8dcd2984d0b8d176058ef6fc142a02

    • SHA1

      2d87762d2abdaab782d6e5b05e121bf071c25bd7

    • SHA256

      0e46f52f39386711f936faa3bf3d9dd2e4ec99d65a2a391f02957eb0074d020d

    • SHA512

      9cdd66f7cdc0352f598dffa0f507a0214050bfab510e7b6bf1e83135283bdbd0bd1c48d8fc749fe5f69d1e70f7ac87a35169ac4da027550998fd0f1f2dc4c593

    • SSDEEP

      3072:NF/WZRnp8OcnnnnnCyk+RZz0gOVE5FZSFfWLLeSONHxgnn0QFm3fQnnnnnnc6B:jWZDSRlFaWLLe/x

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks