General

  • Target

    8c86fac349ea1290018de72b2ee4ac34_JaffaCakes118

  • Size

    777KB

  • Sample

    240602-cbn6yaeh51

  • MD5

    8c86fac349ea1290018de72b2ee4ac34

  • SHA1

    15c6186745eecc80b56ac1f96b11e5622d2557af

  • SHA256

    201054f6d869cbfcdfe71f8e8215ce921b3ddd0779c18b297b57e854cce161bc

  • SHA512

    894020b8f1efa2760fad47b9514989191e38c702b966c693fcdbfe9ddc68ba6a60404b2c0609c819d883000a28c4da23936fba0e0be64c27b48676cbcdfd1dd5

  • SSDEEP

    12288:PmO7Tud0H2b0R/95Ux8DoBpGT0qRH624wzUa:PmOG2H2oRPNoBMTj//

Malware Config

Targets

    • Target

      8c86fac349ea1290018de72b2ee4ac34_JaffaCakes118

    • Size

      777KB

    • MD5

      8c86fac349ea1290018de72b2ee4ac34

    • SHA1

      15c6186745eecc80b56ac1f96b11e5622d2557af

    • SHA256

      201054f6d869cbfcdfe71f8e8215ce921b3ddd0779c18b297b57e854cce161bc

    • SHA512

      894020b8f1efa2760fad47b9514989191e38c702b966c693fcdbfe9ddc68ba6a60404b2c0609c819d883000a28c4da23936fba0e0be64c27b48676cbcdfd1dd5

    • SSDEEP

      12288:PmO7Tud0H2b0R/95Ux8DoBpGT0qRH624wzUa:PmOG2H2oRPNoBMTj//

    • Registers COM server for autorun

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Browser Extensions

1
T1176

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Tasks