General

  • Target

    6b848790d983327eacfafd4448a470c0_JaffaCakes118

  • Size

    245KB

  • Sample

    241022-wdej3axbka

  • MD5

    6b848790d983327eacfafd4448a470c0

  • SHA1

    0938d1dbe6b1a351332516a8148b631312f385c4

  • SHA256

    c73b9c223f6bb3282f4826b5c2f636098b98ce34fb4e248c978be856cc8bed0b

  • SHA512

    da1696110bef529b7991092e6be8d805850e4188aa331270d52c5510d848bdac64baa1e355b73925b3f6aa0668203d6637e8b67c367dabccac990d3475d61b4f

  • SSDEEP

    3072:osHoddhIRlw3urMRyA1DaLAZr+5/xTd5Wbb45RAU4cG5GRbmI6eMXJA/PGcxsZYa:znrMDDaL1vz/lP2V+iisF3

Malware Config

Targets

    • Target

      6b848790d983327eacfafd4448a470c0_JaffaCakes118

    • Size

      245KB

    • MD5

      6b848790d983327eacfafd4448a470c0

    • SHA1

      0938d1dbe6b1a351332516a8148b631312f385c4

    • SHA256

      c73b9c223f6bb3282f4826b5c2f636098b98ce34fb4e248c978be856cc8bed0b

    • SHA512

      da1696110bef529b7991092e6be8d805850e4188aa331270d52c5510d848bdac64baa1e355b73925b3f6aa0668203d6637e8b67c367dabccac990d3475d61b4f

    • SSDEEP

      3072:osHoddhIRlw3urMRyA1DaLAZr+5/xTd5Wbb45RAU4cG5GRbmI6eMXJA/PGcxsZYa:znrMDDaL1vz/lP2V+iisF3

    • SocGholish

      SocGholish is a JavaScript payload that downloads other malware.

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks