General

  • Target

    8426d7db7dcc7446cabdac4e899fd9ec_JaffaCakes118

  • Size

    1010KB

  • Sample

    240530-n54z2agd61

  • MD5

    8426d7db7dcc7446cabdac4e899fd9ec

  • SHA1

    25c3f5b930544359bfa086a1f71357e71e0e9881

  • SHA256

    c6b0c727dabf96b5a83a8c168ed9bf9c768f7e462fb86d5284fb8c5926340777

  • SHA512

    f09e3055b04a3eef5fb6843d2116cf91f28753816f2883aa586bf87212c719372e22f9115ff64ab2698aa1fcadb5fd1dd8196d8e1cd7b78d72b3c209447f6458

  • SSDEEP

    12288:UZWtI6RkUuROB0fO6uROB0TQeN/7YkrWBfWhvRhQUo:UuhapOJOUQeN/7DSBfWho

Malware Config

Targets

    • Target

      8426d7db7dcc7446cabdac4e899fd9ec_JaffaCakes118

    • Size

      1010KB

    • MD5

      8426d7db7dcc7446cabdac4e899fd9ec

    • SHA1

      25c3f5b930544359bfa086a1f71357e71e0e9881

    • SHA256

      c6b0c727dabf96b5a83a8c168ed9bf9c768f7e462fb86d5284fb8c5926340777

    • SHA512

      f09e3055b04a3eef5fb6843d2116cf91f28753816f2883aa586bf87212c719372e22f9115ff64ab2698aa1fcadb5fd1dd8196d8e1cd7b78d72b3c209447f6458

    • SSDEEP

      12288:UZWtI6RkUuROB0fO6uROB0TQeN/7YkrWBfWhvRhQUo:UuhapOJOUQeN/7DSBfWho

    • Disables service(s)

    • Modifies visibility of file extensions in Explorer

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

    • Sets file execution options in registry

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks