General

  • Target

    JaffaCakes118_357b4d2394dfe1dc376f73901cbd1bb1224f665a7b4c46e7a40c57bb53e03c37

  • Size

    693.8MB

  • Sample

    241223-sgmhassrck

  • MD5

    4b330268e47192540de0405f1fdd731e

  • SHA1

    aff6597a598c477134177928b667460501419e48

  • SHA256

    357b4d2394dfe1dc376f73901cbd1bb1224f665a7b4c46e7a40c57bb53e03c37

  • SHA512

    524258a115e31d7f0858d1639486228ceb09c35247cd5cea973d0e7ff4e9580de108fa312330b51218a16c007f754e4771d532682339938b8564ae44073a3937

  • SSDEEP

    196608:QmklKk8ZCnlHTwIo5MJay+eWQFo443kGu:Q8k8Z6lHqmq55

Malware Config

Targets

    • Target

      JaffaCakes118_357b4d2394dfe1dc376f73901cbd1bb1224f665a7b4c46e7a40c57bb53e03c37

    • Size

      693.8MB

    • MD5

      4b330268e47192540de0405f1fdd731e

    • SHA1

      aff6597a598c477134177928b667460501419e48

    • SHA256

      357b4d2394dfe1dc376f73901cbd1bb1224f665a7b4c46e7a40c57bb53e03c37

    • SHA512

      524258a115e31d7f0858d1639486228ceb09c35247cd5cea973d0e7ff4e9580de108fa312330b51218a16c007f754e4771d532682339938b8564ae44073a3937

    • SSDEEP

      196608:QmklKk8ZCnlHTwIo5MJay+eWQFo443kGu:Q8k8Z6lHqmq55

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

    • Privateloader family

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks