General

  • Target

    JaffaCakes118_8ae75600f6aef96964bc20a9ac46028d

  • Size

    109KB

  • Sample

    250328-wsrsya1nx5

  • MD5

    8ae75600f6aef96964bc20a9ac46028d

  • SHA1

    c4107bbe675c90f80e50eb315c086932b5fa3265

  • SHA256

    26b66c5f6fbe539bbc28d74dee7f95e07c2cae5ab3a31233f537f75796d406a8

  • SHA512

    d073d82460005ffc7e8f889bb9fedf93c3ec702a161603131bad1619dd7a39e08a9b5587b3ba39abfb120bf1a3264c917c3aa9f9dc95723e4d7bac42b9d7d6a4

  • SSDEEP

    3072:OCnAYEcnFfVz4Oc7wE/BaXTXakGFqPbo8C:OCZvpp4O0LBajXAcPbRC

Malware Config

Targets

    • Target

      JaffaCakes118_8ae75600f6aef96964bc20a9ac46028d

    • Size

      109KB

    • MD5

      8ae75600f6aef96964bc20a9ac46028d

    • SHA1

      c4107bbe675c90f80e50eb315c086932b5fa3265

    • SHA256

      26b66c5f6fbe539bbc28d74dee7f95e07c2cae5ab3a31233f537f75796d406a8

    • SHA512

      d073d82460005ffc7e8f889bb9fedf93c3ec702a161603131bad1619dd7a39e08a9b5587b3ba39abfb120bf1a3264c917c3aa9f9dc95723e4d7bac42b9d7d6a4

    • SSDEEP

      3072:OCnAYEcnFfVz4Oc7wE/BaXTXakGFqPbo8C:OCZvpp4O0LBajXAcPbRC

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks