General

  • Target

    282ef99b6eb61cee00223678d599851b_JaffaCakes118

  • Size

    281KB

  • Sample

    241009-bf4xhs1bra

  • MD5

    282ef99b6eb61cee00223678d599851b

  • SHA1

    a27f9b4aef41147b04874e944d0c9bf3b8dc42a7

  • SHA256

    db9e5139d623452d9d765bd3b5d5718469fe9ae7acadf72215f997d12044d903

  • SHA512

    61f28cf81ff50e90ed938e965737c875030302dacd31b903bed990b78955215be42e06e96fa34c683170754a794524e65935872b8e8591ca8a21623aed852169

  • SSDEEP

    6144:3eRowJ8c90lALqkUpIvZ0ZMA151oIrlosM2saGoSp:uRowJ8g1qTg0ZR1t1MdloSp

Malware Config

Targets

    • Target

      282ef99b6eb61cee00223678d599851b_JaffaCakes118

    • Size

      281KB

    • MD5

      282ef99b6eb61cee00223678d599851b

    • SHA1

      a27f9b4aef41147b04874e944d0c9bf3b8dc42a7

    • SHA256

      db9e5139d623452d9d765bd3b5d5718469fe9ae7acadf72215f997d12044d903

    • SHA512

      61f28cf81ff50e90ed938e965737c875030302dacd31b903bed990b78955215be42e06e96fa34c683170754a794524e65935872b8e8591ca8a21623aed852169

    • SSDEEP

      6144:3eRowJ8c90lALqkUpIvZ0ZMA151oIrlosM2saGoSp:uRowJ8g1qTg0ZR1t1MdloSp

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks