General

  • Target

    22cd001c5a24d32f242f7305b5a36197_JaffaCakes118

  • Size

    392KB

  • Sample

    240703-slnadswbjj

  • MD5

    22cd001c5a24d32f242f7305b5a36197

  • SHA1

    dcf41cd59bfd1d4411398f0a3be68af8ca4edcc9

  • SHA256

    f0ed7f9caffda70efc505dc92c7c23ad4e0044829912f72afbdf4fd8977f46ef

  • SHA512

    e9f3daa7c3bec999a51071a2cbac34520138010ccf27db5ff9fa48c682f68b285436084bfa832650755748fff99276a3356f1bb3b84b6551f67c4e76f17d2f50

  • SSDEEP

    6144:JHYNpUkqkFwzgVq767LkLbv1P/AxrvNCBeq0fG5bfAYSR6VbysZk1dWyRr3d69qU:uoCJibvNYJbxYYgbRke6DgqxG

Malware Config

Targets

    • Target

      22cd001c5a24d32f242f7305b5a36197_JaffaCakes118

    • Size

      392KB

    • MD5

      22cd001c5a24d32f242f7305b5a36197

    • SHA1

      dcf41cd59bfd1d4411398f0a3be68af8ca4edcc9

    • SHA256

      f0ed7f9caffda70efc505dc92c7c23ad4e0044829912f72afbdf4fd8977f46ef

    • SHA512

      e9f3daa7c3bec999a51071a2cbac34520138010ccf27db5ff9fa48c682f68b285436084bfa832650755748fff99276a3356f1bb3b84b6551f67c4e76f17d2f50

    • SSDEEP

      6144:JHYNpUkqkFwzgVq767LkLbv1P/AxrvNCBeq0fG5bfAYSR6VbysZk1dWyRr3d69qU:uoCJibvNYJbxYYgbRke6DgqxG

    • Windows security bypass

    • Disables taskbar notifications via registry modification

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks