General

  • Target

    JaffaCakes118_438c7607771a21caee7fe785d25d7989

  • Size

    1.2MB

  • Sample

    250127-zlsy7svrfp

  • MD5

    438c7607771a21caee7fe785d25d7989

  • SHA1

    06c49c0485667ed58ba0e24ae25b096575d83106

  • SHA256

    e6971d47bfabe8b761031f726ac9cf975fe1b734b7af5f022895d184733c6a47

  • SHA512

    ba61f68d26d76c01b673a28d7404288c20ad3ee8d1a81e53c261e62e5fc51af046d89c08c96dc4806fba0bca84e9b81f01fc040d85fc2e12d5a9b8455079db0f

  • SSDEEP

    24576:wrA2mqpPU30WXu3tFo6J0bn0Q0fQ5+elMShl9o/2tDmp624zwdKRqtIWjuPpdJGV:CfnJfo6q8QKMTq6Iq6tjae

Malware Config

Targets

    • Target

      JaffaCakes118_438c7607771a21caee7fe785d25d7989

    • Size

      1.2MB

    • MD5

      438c7607771a21caee7fe785d25d7989

    • SHA1

      06c49c0485667ed58ba0e24ae25b096575d83106

    • SHA256

      e6971d47bfabe8b761031f726ac9cf975fe1b734b7af5f022895d184733c6a47

    • SHA512

      ba61f68d26d76c01b673a28d7404288c20ad3ee8d1a81e53c261e62e5fc51af046d89c08c96dc4806fba0bca84e9b81f01fc040d85fc2e12d5a9b8455079db0f

    • SSDEEP

      24576:wrA2mqpPU30WXu3tFo6J0bn0Q0fQ5+elMShl9o/2tDmp624zwdKRqtIWjuPpdJGV:CfnJfo6q8QKMTq6Iq6tjae

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Deletes itself

    • Executes dropped EXE

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks