General
-
Target
ae9a90540d79b7aa7f86b73562b7ac5c_JaffaCakes118
-
Size
1.1MB
-
Sample
240615-qk212swbpl
-
MD5
ae9a90540d79b7aa7f86b73562b7ac5c
-
SHA1
c4bc6df18791d74eadabddaae5709244932987ee
-
SHA256
ab04fb658dad391322e1518d65e085ea34b4dba81db53520397c0b6e5ae7cff2
-
SHA512
d88c806e08250c3b8dd094a2f420a47e349adaec3ebc03159bdf3fa1af988dc9ffe749cd05406fb6333a24950573f006bb419e3f9ea7216cafa630c84318ee3f
-
SSDEEP
24576:teGpARnavJyU1m2IISC2PlP5kYDji6/AkzMYh7g6e:oGqkvJyLjmSlP5kYDpIOrh
Static task
static1
Behavioral task
behavioral1
Sample
ae9a90540d79b7aa7f86b73562b7ac5c_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
ae9a90540d79b7aa7f86b73562b7ac5c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
njrat
im523
HacKer
91.232.111.212:7777
4a3d67ee61b43118e4130164dec374f7
-
reg_key
4a3d67ee61b43118e4130164dec374f7
-
splitter
|'|'|
Targets
-
-
Target
ae9a90540d79b7aa7f86b73562b7ac5c_JaffaCakes118
-
Size
1.1MB
-
MD5
ae9a90540d79b7aa7f86b73562b7ac5c
-
SHA1
c4bc6df18791d74eadabddaae5709244932987ee
-
SHA256
ab04fb658dad391322e1518d65e085ea34b4dba81db53520397c0b6e5ae7cff2
-
SHA512
d88c806e08250c3b8dd094a2f420a47e349adaec3ebc03159bdf3fa1af988dc9ffe749cd05406fb6333a24950573f006bb419e3f9ea7216cafa630c84318ee3f
-
SSDEEP
24576:teGpARnavJyU1m2IISC2PlP5kYDji6/AkzMYh7g6e:oGqkvJyLjmSlP5kYDpIOrh
Score10/10-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
MITRE ATT&CK Matrix ATT&CK v13
Persistence
Create or Modify System Process
1Windows Service
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1