General

  • Target

    4a2be3af52f74b5f5120b8431e5610b8_JaffaCakes118

  • Size

    488KB

  • Sample

    241015-1pyvasyfpb

  • MD5

    4a2be3af52f74b5f5120b8431e5610b8

  • SHA1

    397f18e3d2a592bf479d35c82e7a76a5d3391967

  • SHA256

    b57fd996f2bcb3d3c09ead04b388a9fc619018985e26be74a65efbb4487462e2

  • SHA512

    2eebb9f8f4b041599e4b17156b3fba377b36a2bb08bf0f7b78b503bcc7c34a53cb2fcf3fceb1efb3cdd24e82b00a9f4f24eaeed6caa5f348a4be5d84e54a1448

  • SSDEEP

    12288:T33Q9q2bGUVa0eJqj6ACNTuihvSlqP37lCMtB64zg:T3bcGUVZeJWUNTThqIP37lh/fzg

Malware Config

Targets

    • Target

      4a2be3af52f74b5f5120b8431e5610b8_JaffaCakes118

    • Size

      488KB

    • MD5

      4a2be3af52f74b5f5120b8431e5610b8

    • SHA1

      397f18e3d2a592bf479d35c82e7a76a5d3391967

    • SHA256

      b57fd996f2bcb3d3c09ead04b388a9fc619018985e26be74a65efbb4487462e2

    • SHA512

      2eebb9f8f4b041599e4b17156b3fba377b36a2bb08bf0f7b78b503bcc7c34a53cb2fcf3fceb1efb3cdd24e82b00a9f4f24eaeed6caa5f348a4be5d84e54a1448

    • SSDEEP

      12288:T33Q9q2bGUVa0eJqj6ACNTuihvSlqP37lCMtB64zg:T3bcGUVZeJWUNTThqIP37lh/fzg

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks