General
-
Target
f96f2888d003c78f7a1494d753f8b33f_JaffaCakes118
-
Size
278KB
-
Sample
240419-eby29agg9s
-
MD5
f96f2888d003c78f7a1494d753f8b33f
-
SHA1
bf1f8b320e17b30b6bbdb0c20aa663d9dd432e1e
-
SHA256
4c3dfe617e52aee6a9df6267021a7e3d412b70419693caf68d26530f2bbb4b29
-
SHA512
4187f38fc6b2d5253b127fa7755d6e429bea0bbc0cad823e83e677bc78ad2843ed22c638f7e3060465fac4b62efe7d61890d93065be9494fe9ec8ebd7e0af6bc
-
SSDEEP
6144:MCvJGq7COG+85s5CbLWTrRInjbtMB/TsQOtyA5ytDSXh24p0:fv4q7C5p5sW6hIjbAXJAcRKhD
Static task
static1
Behavioral task
behavioral1
Sample
f96f2888d003c78f7a1494d753f8b33f_JaffaCakes118.exe
Resource
win7-20231129-en
Malware Config
Targets
-
-
Target
f96f2888d003c78f7a1494d753f8b33f_JaffaCakes118
-
Size
278KB
-
MD5
f96f2888d003c78f7a1494d753f8b33f
-
SHA1
bf1f8b320e17b30b6bbdb0c20aa663d9dd432e1e
-
SHA256
4c3dfe617e52aee6a9df6267021a7e3d412b70419693caf68d26530f2bbb4b29
-
SHA512
4187f38fc6b2d5253b127fa7755d6e429bea0bbc0cad823e83e677bc78ad2843ed22c638f7e3060465fac4b62efe7d61890d93065be9494fe9ec8ebd7e0af6bc
-
SSDEEP
6144:MCvJGq7COG+85s5CbLWTrRInjbtMB/TsQOtyA5ytDSXh24p0:fv4q7C5p5sW6hIjbAXJAcRKhD
-
Modifies security service
-
Disables taskbar notifications via registry modification
-
Modifies Installed Components in the registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Create or Modify System Process
1Windows Service
1