General

  • Target

    3092adea64e860265755900b8dad0242_JaffaCakes118

  • Size

    162KB

  • Sample

    241010-stmc3asejg

  • MD5

    3092adea64e860265755900b8dad0242

  • SHA1

    48a00d7aefcfb709ec1aec6392e165fd896b9c50

  • SHA256

    a69bebef3cf47d86c8d9167eafc273a22c3582a1bbff820850397b11b1be7da5

  • SHA512

    8419907d5405e847ccdd6bb9831f98c6777723956c1ba4e168c8f801933c95f4159eb7a7091a27f8c6983698c4d0b3f87af8b9a8077c3d114d2e496b61e37c09

  • SSDEEP

    3072:i22ihA0m3BJf0vleUpsugJqlhKU53jlN9twYsO3EaU+UQTHZLF:dA0m3T0vNAwbLRHCK31yg1

Score
7/10

Malware Config

Targets

    • Target

      3092adea64e860265755900b8dad0242_JaffaCakes118

    • Size

      162KB

    • MD5

      3092adea64e860265755900b8dad0242

    • SHA1

      48a00d7aefcfb709ec1aec6392e165fd896b9c50

    • SHA256

      a69bebef3cf47d86c8d9167eafc273a22c3582a1bbff820850397b11b1be7da5

    • SHA512

      8419907d5405e847ccdd6bb9831f98c6777723956c1ba4e168c8f801933c95f4159eb7a7091a27f8c6983698c4d0b3f87af8b9a8077c3d114d2e496b61e37c09

    • SSDEEP

      3072:i22ihA0m3BJf0vleUpsugJqlhKU53jlN9twYsO3EaU+UQTHZLF:dA0m3T0vNAwbLRHCK31yg1

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Target

      $TEMP/biclient.exe

    • Size

      223KB

    • MD5

      ac8f7611f353ca9803fad5ff81900678

    • SHA1

      de33325e686c82c12db1f95f39e94ac746f5b5b5

    • SHA256

      ef72a8db980a2c299006b1c32b6ab0a74fd00dfc131c6ae7f13b392adf4159cc

    • SHA512

      75d7d0a106f8cc02cac734e34a4cccd97d814214c397e2c05eb00b95b4ef87d2ce60e368b8d418a9c5b330b239547d1d9555538b6a2c705040a746bdcb320571

    • SSDEEP

      3072:7xOP3+LdB0XczQDfCli9gm3XD/vVev9GGBFCZ2LipO23zkb5c6VsSIVeWr:IOm1QiLVIjCZ2LipOFe7H

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks