General
-
Target
16b10bec3dde1e3508a4efd40a1e31a8_JaffaCakes118
-
Size
287KB
-
Sample
240627-tyj9yazcpc
-
MD5
16b10bec3dde1e3508a4efd40a1e31a8
-
SHA1
f4c9c2a2e5a9beceb8f10fc3159ee3d82f5d3027
-
SHA256
bdb927d40191c5ba3e20ad379c2a327cb815586b6e8b704accc7497a8fb2b0e3
-
SHA512
e447d84031eea8481af9650fb1d10012c364aab9d2b804e9eef38d3b02f4adf448fe34faddc00ab816368039eacb879d512ea2d165a29087fd3e84a39a9f4307
-
SSDEEP
6144:hIoQh2fv8NtpCt8EZlBr/fKFRWXtAy8G1NebjnuXuJ:mfh2XNtvbKFR6J8GCbjK
Static task
static1
Behavioral task
behavioral1
Sample
16b10bec3dde1e3508a4efd40a1e31a8_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
16b10bec3dde1e3508a4efd40a1e31a8_JaffaCakes118
-
Size
287KB
-
MD5
16b10bec3dde1e3508a4efd40a1e31a8
-
SHA1
f4c9c2a2e5a9beceb8f10fc3159ee3d82f5d3027
-
SHA256
bdb927d40191c5ba3e20ad379c2a327cb815586b6e8b704accc7497a8fb2b0e3
-
SHA512
e447d84031eea8481af9650fb1d10012c364aab9d2b804e9eef38d3b02f4adf448fe34faddc00ab816368039eacb879d512ea2d165a29087fd3e84a39a9f4307
-
SSDEEP
6144:hIoQh2fv8NtpCt8EZlBr/fKFRWXtAy8G1NebjnuXuJ:mfh2XNtvbKFR6J8GCbjK
-
Modifies security service
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Disables taskbar notifications via registry modification
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1