General

  • Target

    522dfea93a76a9903776deddf02ad475_JaffaCakes118

  • Size

    856KB

  • Sample

    240518-aehr8aac67

  • MD5

    522dfea93a76a9903776deddf02ad475

  • SHA1

    66276a0d33f4bc1f63fe000da159a05383e60b3b

  • SHA256

    6fab25a8710f11d1aa6617eef386bdc8143585e80124f414a82db3406b2f5d92

  • SHA512

    389c8ebc9f4643826e7b8e3347e409eb478b52be8e04297f377b8df411a14e0a56be487b376fb0c01d8fb468d33cd9fa335898128f2e3066199af402e3bb57e2

  • SSDEEP

    24576:qdhGYxd4mmnMP2hb7dGywJP5IgbDh/Wh4XfjQg:ghR/nm22RfuBI5h4L

Malware Config

Targets

    • Target

      522dfea93a76a9903776deddf02ad475_JaffaCakes118

    • Size

      856KB

    • MD5

      522dfea93a76a9903776deddf02ad475

    • SHA1

      66276a0d33f4bc1f63fe000da159a05383e60b3b

    • SHA256

      6fab25a8710f11d1aa6617eef386bdc8143585e80124f414a82db3406b2f5d92

    • SHA512

      389c8ebc9f4643826e7b8e3347e409eb478b52be8e04297f377b8df411a14e0a56be487b376fb0c01d8fb468d33cd9fa335898128f2e3066199af402e3bb57e2

    • SSDEEP

      24576:qdhGYxd4mmnMP2hb7dGywJP5IgbDh/Wh4XfjQg:ghR/nm22RfuBI5h4L

    • Luminosity

      Luminosity is a RAT family that was on sale, while claiming to be a system administration utility.

    • Adds Run key to start application

MITRE ATT&CK Matrix ATT&CK v13

Execution

Scheduled Task/Job

1
T1053

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Scheduled Task/Job

1
T1053

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Scheduled Task/Job

1
T1053

Defense Evasion

Modify Registry

1
T1112

Tasks