General

  • Target

    69e8769bd68e70a28e16e1f8965aac4c_JaffaCakes118

  • Size

    905KB

  • Sample

    240523-gca3xsfd61

  • MD5

    69e8769bd68e70a28e16e1f8965aac4c

  • SHA1

    cba7dc64b617484e30afe48d5fe891ee44155c83

  • SHA256

    12831a16b940cb0ba231cd5c060def621809ebacc98aad02c4b913ae3ff56b98

  • SHA512

    8d14dfa3dd9025ce74a7ce3a7d82f85d8cb76b72c149be8bada21defbfe6e7925d5d5cd4c3781ee2b448e6281da176dfadd5a07cdec89ed4890df36932d351eb

  • SSDEEP

    24576:Im/kQJ4SuL+tacsZAqTqcb/jUOPy3957N4:Im/kQJEL8acsamqce395Z4

Malware Config

Targets

    • Target

      69e8769bd68e70a28e16e1f8965aac4c_JaffaCakes118

    • Size

      905KB

    • MD5

      69e8769bd68e70a28e16e1f8965aac4c

    • SHA1

      cba7dc64b617484e30afe48d5fe891ee44155c83

    • SHA256

      12831a16b940cb0ba231cd5c060def621809ebacc98aad02c4b913ae3ff56b98

    • SHA512

      8d14dfa3dd9025ce74a7ce3a7d82f85d8cb76b72c149be8bada21defbfe6e7925d5d5cd4c3781ee2b448e6281da176dfadd5a07cdec89ed4890df36932d351eb

    • SSDEEP

      24576:Im/kQJ4SuL+tacsZAqTqcb/jUOPy3957N4:Im/kQJEL8acsamqce395Z4

    • Registers COM server for autorun

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks