General

  • Target

    2e98e2e9fcf04f4d31ea8785927cc4d1_JaffaCakes118

  • Size

    159KB

  • Sample

    241009-lbdjwatcrk

  • MD5

    2e98e2e9fcf04f4d31ea8785927cc4d1

  • SHA1

    bd1984adca0db801d3e05cf643a4f71680a21cfd

  • SHA256

    5b8a6c82452e3472e3f60be60e4780434cf0f5ddb24eac5d31afdc229b0ae897

  • SHA512

    ecfd8c1ed0aa79ec2e8170999816f7f035d238ebb98fe319757f0dc5cb3db16dea9b60b3babe39c7d1fb57e55e636eae10862c594c78942c3649d811bec2bf76

  • SSDEEP

    3072:t22ihA0m3BJf0AL5RPmD1sj3OeatQbkVDQMPzUKEBdzCFeHXQSWY:2A0m3T0AHu5K3FezpAdzuoQC

Score
7/10

Malware Config

Targets

    • Target

      2e98e2e9fcf04f4d31ea8785927cc4d1_JaffaCakes118

    • Size

      159KB

    • MD5

      2e98e2e9fcf04f4d31ea8785927cc4d1

    • SHA1

      bd1984adca0db801d3e05cf643a4f71680a21cfd

    • SHA256

      5b8a6c82452e3472e3f60be60e4780434cf0f5ddb24eac5d31afdc229b0ae897

    • SHA512

      ecfd8c1ed0aa79ec2e8170999816f7f035d238ebb98fe319757f0dc5cb3db16dea9b60b3babe39c7d1fb57e55e636eae10862c594c78942c3649d811bec2bf76

    • SSDEEP

      3072:t22ihA0m3BJf0AL5RPmD1sj3OeatQbkVDQMPzUKEBdzCFeHXQSWY:2A0m3T0AHu5K3FezpAdzuoQC

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Target

      $TEMP/biclient.exe

    • Size

      219KB

    • MD5

      c66293ccd7cbe84b1b8f393ca5e4e6d7

    • SHA1

      c24089d407e6280b79bec86532e9de0118e4de71

    • SHA256

      ffbae29e2f233767fd42909720497165ce3552427ef93efb2fc714fb4204755f

    • SHA512

      7ff97aa71f182035f90ba10c3bf8087280e3f34bf717bda139d642f4e043c64aa2b98d82a90a32f1df4b76f9d7610af62390fe934e514c90c703381a421c00b7

    • SSDEEP

      3072:bn9mtkIrxidB8D+WS6nj+fgOclZDeVxn/pkcgVLbQJR+6QWZb54vVsSIVT6:aXxK2jmXcEVVvgVLbQbZWc

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks