General
-
Target
e258998d52ed363732ca5dd9f4ac5602_JaffaCakes118
-
Size
634KB
-
Sample
240406-mnh6kagh93
-
MD5
e258998d52ed363732ca5dd9f4ac5602
-
SHA1
1ca86f2b294f3ab3efff61885ece0a83ae6ea984
-
SHA256
19eaa99708bc3434d74a8bad49f53605c42f833562a31de1e5b0285af1cbfa5e
-
SHA512
c70efa1fd052d31c1bac70e6c00c090f8ecc2c0be79fdd238cb94850cec63bfca7afb6026a19160133077f511c1df600589c071ca496cdf298a7d951da62e8fc
-
SSDEEP
6144:Z3OOCKLlcPKJEld2zJQPfuSlMHyaXXu6FQGkcC+V5R5azYBONNYJ7efR9tF:lOOZpUtlwX+zc7V5Rn1JyfP
Static task
static1
Behavioral task
behavioral1
Sample
e258998d52ed363732ca5dd9f4ac5602_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e258998d52ed363732ca5dd9f4ac5602_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
e258998d52ed363732ca5dd9f4ac5602_JaffaCakes118
-
Size
634KB
-
MD5
e258998d52ed363732ca5dd9f4ac5602
-
SHA1
1ca86f2b294f3ab3efff61885ece0a83ae6ea984
-
SHA256
19eaa99708bc3434d74a8bad49f53605c42f833562a31de1e5b0285af1cbfa5e
-
SHA512
c70efa1fd052d31c1bac70e6c00c090f8ecc2c0be79fdd238cb94850cec63bfca7afb6026a19160133077f511c1df600589c071ca496cdf298a7d951da62e8fc
-
SSDEEP
6144:Z3OOCKLlcPKJEld2zJQPfuSlMHyaXXu6FQGkcC+V5R5azYBONNYJ7efR9tF:lOOZpUtlwX+zc7V5Rn1JyfP
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies system executable filetype association
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Change Default File Association
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Change Default File Association
1