General

  • Target

    37a48bb5b946eb3a3c49df29588a2b25_JaffaCakes118

  • Size

    41KB

  • Sample

    241012-a5yalaxfpl

  • MD5

    37a48bb5b946eb3a3c49df29588a2b25

  • SHA1

    1ebd0e12783ebc3e4af1c5c5a8ca776c53beaa51

  • SHA256

    e78ba7e1776595571dfd6f5a8a54cf368d2d652ecfb31dd8fb53ff4f56095486

  • SHA512

    ef56e31141cc3285195061e42c301ba482581fa409b9c5d3c8b21d235930a718bb73311b99111ad945efb74cb1a2705e8b253f26ee9c0232cc2498c5f6240bf1

  • SSDEEP

    768:IZ8d0s/fUhO6kdF0eMGD4UP6U/ozLZX4fyX/J:m8dahjk4eesozNXEs

Malware Config

Targets

    • Target

      37a48bb5b946eb3a3c49df29588a2b25_JaffaCakes118

    • Size

      41KB

    • MD5

      37a48bb5b946eb3a3c49df29588a2b25

    • SHA1

      1ebd0e12783ebc3e4af1c5c5a8ca776c53beaa51

    • SHA256

      e78ba7e1776595571dfd6f5a8a54cf368d2d652ecfb31dd8fb53ff4f56095486

    • SHA512

      ef56e31141cc3285195061e42c301ba482581fa409b9c5d3c8b21d235930a718bb73311b99111ad945efb74cb1a2705e8b253f26ee9c0232cc2498c5f6240bf1

    • SSDEEP

      768:IZ8d0s/fUhO6kdF0eMGD4UP6U/ozLZX4fyX/J:m8dahjk4eesozNXEs

    • Event Triggered Execution: AppCert DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppCert DLLs loaded into processes.

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks