General

  • Target

    260dbf174f783516261aa1e926677338_JaffaCakes118

  • Size

    139KB

  • Sample

    241008-1vk6dsvelb

  • MD5

    260dbf174f783516261aa1e926677338

  • SHA1

    0c78d437825d73f446ae0ccb1c2be2c57b1f981f

  • SHA256

    c722000f0f29049b86ad6d2fc2e4a85a93458c50b08ff8ab8c9f74d32d89a157

  • SHA512

    8a63bda9e9d5d00ac584c0b0e49d1e426a9dfbfbaf74dfdcff8152b2462a8b7c3aef6f038adf673fce31197f4b95afe0a73d07971a245602191d9f0b967c7ea0

  • SSDEEP

    1536:AQHBkybTa+cGLB+6QsxN6JP6NG4cZy6+aof8F6OIJGfK9ZSkUR8mgPxeNrtthVs:AQhkD+cma0Gpw65km6OIGamg52tj

Malware Config

Targets

    • Target

      260dbf174f783516261aa1e926677338_JaffaCakes118

    • Size

      139KB

    • MD5

      260dbf174f783516261aa1e926677338

    • SHA1

      0c78d437825d73f446ae0ccb1c2be2c57b1f981f

    • SHA256

      c722000f0f29049b86ad6d2fc2e4a85a93458c50b08ff8ab8c9f74d32d89a157

    • SHA512

      8a63bda9e9d5d00ac584c0b0e49d1e426a9dfbfbaf74dfdcff8152b2462a8b7c3aef6f038adf673fce31197f4b95afe0a73d07971a245602191d9f0b967c7ea0

    • SSDEEP

      1536:AQHBkybTa+cGLB+6QsxN6JP6NG4cZy6+aof8F6OIJGfK9ZSkUR8mgPxeNrtthVs:AQhkD+cma0Gpw65km6OIGamg52tj

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks