General
-
Target
27d2f01113bca9e8aaa61aae270ad569_JaffaCakes118
-
Size
1.5MB
-
Sample
240706-jwbvns1gml
-
MD5
27d2f01113bca9e8aaa61aae270ad569
-
SHA1
2ebde4755ed8ddb48ca7cfa97706e6daaa32e827
-
SHA256
1d497ab5996b9a27ca7c28f81168872059d2986c6af97618fad4265efe08c313
-
SHA512
a254308af678b3a36758e68c4af4886fb5ffc7cfcd0d87d0c857b56ccd40e0ec2de016c22bb915d8bf267b0723e37eadbbbc9df66c72a1fb9ebecd1963b2b640
-
SSDEEP
12288:gOFBuOB0JupOB06GOFBuOB0JupOB06GOFBuOB0JupOB06GOFBuOB0JupOB06WF:LBuO9ONBuO9ONBuO9ONBuO9OmF
Malware Config
Targets
-
-
Target
27d2f01113bca9e8aaa61aae270ad569_JaffaCakes118
-
Size
1.5MB
-
MD5
27d2f01113bca9e8aaa61aae270ad569
-
SHA1
2ebde4755ed8ddb48ca7cfa97706e6daaa32e827
-
SHA256
1d497ab5996b9a27ca7c28f81168872059d2986c6af97618fad4265efe08c313
-
SHA512
a254308af678b3a36758e68c4af4886fb5ffc7cfcd0d87d0c857b56ccd40e0ec2de016c22bb915d8bf267b0723e37eadbbbc9df66c72a1fb9ebecd1963b2b640
-
SSDEEP
12288:gOFBuOB0JupOB06GOFBuOB0JupOB06GOFBuOB0JupOB06GOFBuOB0JupOB06WF:LBuO9ONBuO9ONBuO9ONBuO9OmF
Score10/10-
Disables service(s)
-
Modifies visibility of file extensions in Explorer
-
Blocks application from running via registry modification
Adds application to list of disallowed applications.
-
Event Triggered Execution: Image File Execution Options Injection
-
Executes dropped EXE
-
Loads dropped DLL
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Image File Execution Options Injection
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Image File Execution Options Injection
1