General

  • Target

    2c2aaba01dd4eee1b0e89043858e67ed_JaffaCakes118

  • Size

    159KB

  • Sample

    241009-gsytxszgjc

  • MD5

    2c2aaba01dd4eee1b0e89043858e67ed

  • SHA1

    b20d5d5f363b33bbd979bcd16fdf9e00dc9977b6

  • SHA256

    ddd2a720c2589c503776c0248a79eda2738fef749aa4759ee55b12a36bdc577c

  • SHA512

    426f7690771618de6280c23ba8dc48e4e7c901cf78c79e5c140b5e34fb88894f9c9aaf3fba10bb840e4a4e1a15bd254ef7eacff55a1a7409a3951770774e557b

  • SSDEEP

    3072:X22ihA0m3BJf0AIGSYoQAL8zNZE/CyHhdjNRczbMTMzbZ9CA:oA0m3T0AITYoQrhZEqyzZGHMGb5

Score
7/10

Malware Config

Targets

    • Target

      2c2aaba01dd4eee1b0e89043858e67ed_JaffaCakes118

    • Size

      159KB

    • MD5

      2c2aaba01dd4eee1b0e89043858e67ed

    • SHA1

      b20d5d5f363b33bbd979bcd16fdf9e00dc9977b6

    • SHA256

      ddd2a720c2589c503776c0248a79eda2738fef749aa4759ee55b12a36bdc577c

    • SHA512

      426f7690771618de6280c23ba8dc48e4e7c901cf78c79e5c140b5e34fb88894f9c9aaf3fba10bb840e4a4e1a15bd254ef7eacff55a1a7409a3951770774e557b

    • SSDEEP

      3072:X22ihA0m3BJf0AIGSYoQAL8zNZE/CyHhdjNRczbMTMzbZ9CA:oA0m3T0AITYoQrhZEqyzZGHMGb5

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Target

      $TEMP/biclient.exe

    • Size

      219KB

    • MD5

      c66293ccd7cbe84b1b8f393ca5e4e6d7

    • SHA1

      c24089d407e6280b79bec86532e9de0118e4de71

    • SHA256

      ffbae29e2f233767fd42909720497165ce3552427ef93efb2fc714fb4204755f

    • SHA512

      7ff97aa71f182035f90ba10c3bf8087280e3f34bf717bda139d642f4e043c64aa2b98d82a90a32f1df4b76f9d7610af62390fe934e514c90c703381a421c00b7

    • SSDEEP

      3072:bn9mtkIrxidB8D+WS6nj+fgOclZDeVxn/pkcgVLbQJR+6QWZb54vVsSIVT6:aXxK2jmXcEVVvgVLbQbZWc

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks