General

  • Target

    44e3428168a0fa5eb1449cb066ad73a0_JaffaCakes118

  • Size

    140KB

  • Sample

    241015-aldrvatdrf

  • MD5

    44e3428168a0fa5eb1449cb066ad73a0

  • SHA1

    5eb48f9038364011a4b3281b2c5f79587ae5c948

  • SHA256

    8be03578480778ee2d319def9dc863934cd6c02b34100ddd53f79df24fe8ca57

  • SHA512

    7d76b10ff75244db710cc95e4266057889b130852f423533a2dc84b07fb40d2df1fec611a1af20ade09f167d0b3e29ed6144ae617f536c4a149cdfcbf25468f0

  • SSDEEP

    3072:DjHVIz5YoaLa58yLIpuXNeqppBLAm+mCEssSXQ6PicdkWGqzjTk:PcaLPyUu5JzAsJ/i1Gqzk

Malware Config

Targets

    • Target

      44e3428168a0fa5eb1449cb066ad73a0_JaffaCakes118

    • Size

      140KB

    • MD5

      44e3428168a0fa5eb1449cb066ad73a0

    • SHA1

      5eb48f9038364011a4b3281b2c5f79587ae5c948

    • SHA256

      8be03578480778ee2d319def9dc863934cd6c02b34100ddd53f79df24fe8ca57

    • SHA512

      7d76b10ff75244db710cc95e4266057889b130852f423533a2dc84b07fb40d2df1fec611a1af20ade09f167d0b3e29ed6144ae617f536c4a149cdfcbf25468f0

    • SSDEEP

      3072:DjHVIz5YoaLa58yLIpuXNeqppBLAm+mCEssSXQ6PicdkWGqzjTk:PcaLPyUu5JzAsJ/i1Gqzk

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks