General
-
Target
e5638483b1e667b623101e4a4815d229_JaffaCakes118
-
Size
282KB
-
Sample
240407-t9w3wahd54
-
MD5
e5638483b1e667b623101e4a4815d229
-
SHA1
62f596d729a3eb08554787c77f80d387d49f117e
-
SHA256
67fd9c21a9f3ddcd5bfe3a2368e5cc0f60622fd484d79b234e83493aef665196
-
SHA512
e7fc2f61b9a8d760f08f5677f4f72947f1c1c7b4e0c2405d70167dabbf29c8290ad22a4b95c66765b87f85885ca533bf73dd60d3ca995438936db87ca8f7285e
-
SSDEEP
6144:crPrgEYF57R69Um+nEY0kqk4PXzCPamiHtRNCI6X:2gXF9R6ym+skK07mKX
Static task
static1
Behavioral task
behavioral1
Sample
e5638483b1e667b623101e4a4815d229_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
e5638483b1e667b623101e4a4815d229_JaffaCakes118
-
Size
282KB
-
MD5
e5638483b1e667b623101e4a4815d229
-
SHA1
62f596d729a3eb08554787c77f80d387d49f117e
-
SHA256
67fd9c21a9f3ddcd5bfe3a2368e5cc0f60622fd484d79b234e83493aef665196
-
SHA512
e7fc2f61b9a8d760f08f5677f4f72947f1c1c7b4e0c2405d70167dabbf29c8290ad22a4b95c66765b87f85885ca533bf73dd60d3ca995438936db87ca8f7285e
-
SSDEEP
6144:crPrgEYF57R69Um+nEY0kqk4PXzCPamiHtRNCI6X:2gXF9R6ym+skK07mKX
-
Modifies security service
-
Disables taskbar notifications via registry modification
-
Modifies Installed Components in the registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
MITRE ATT&CK Matrix ATT&CK v13
Persistence
Create or Modify System Process
1Windows Service
1Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Privilege Escalation
Create or Modify System Process
1Windows Service
1Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2