General

  • Target

    2f595b8acb65bbf5264342442f8d3077_JaffaCakes118

  • Size

    50KB

  • Sample

    241009-mcswmatara

  • MD5

    2f595b8acb65bbf5264342442f8d3077

  • SHA1

    bd7ac08d2fe047476eaa4eb9b7172b5dbbace013

  • SHA256

    b22c51e018397d4e4dda03a18f10d787c3fa966ddf8b1429eea2c118f7de4595

  • SHA512

    99b2d9174c8618ff26717f5c2431f0e796686ee86d41639ed54c527150a3e67c285d9c0e681f7ee0af6c043426fb3ac14c35b8b298cc656cd799f772f357d778

  • SSDEEP

    768:njtCpMIpNTmP0dRHlhD3w42Yb+VdHbaQ/hjGWOMUK+tGDoIwnbPmeiJyXDmis:njUB3D3PlOdHbauj2bmeniF

Malware Config

Targets

    • Target

      2f595b8acb65bbf5264342442f8d3077_JaffaCakes118

    • Size

      50KB

    • MD5

      2f595b8acb65bbf5264342442f8d3077

    • SHA1

      bd7ac08d2fe047476eaa4eb9b7172b5dbbace013

    • SHA256

      b22c51e018397d4e4dda03a18f10d787c3fa966ddf8b1429eea2c118f7de4595

    • SHA512

      99b2d9174c8618ff26717f5c2431f0e796686ee86d41639ed54c527150a3e67c285d9c0e681f7ee0af6c043426fb3ac14c35b8b298cc656cd799f772f357d778

    • SSDEEP

      768:njtCpMIpNTmP0dRHlhD3w42Yb+VdHbaQ/hjGWOMUK+tGDoIwnbPmeiJyXDmis:njUB3D3PlOdHbauj2bmeniF

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks