General

  • Target

    282869ea3d3099da27462a267f453ab9_JaffaCakes118

  • Size

    393KB

  • Sample

    240706-l4zyksvgmq

  • MD5

    282869ea3d3099da27462a267f453ab9

  • SHA1

    9418212615b8b16cf9947e3596f5ffb3245613db

  • SHA256

    8a18e5aaa4e5f9b38fcd45d898577c3e4673551d3fcb6088e617dd4371da1dbb

  • SHA512

    20910173beb7a74a71a1fdf376bc3ad1e6bc91882bec7c610dc4db862c9f3be54b4df60b92ebf202cf8a63725c6680675e84d0c1044c5a548ebd377ae1a07b2c

  • SSDEEP

    12288:/fn3KpJI6xj1dV9fJcEXW4OYIb5IiENCaTbAL:/PCb1dV9fJhXWGHNDbAL

Malware Config

Targets

    • Target

      282869ea3d3099da27462a267f453ab9_JaffaCakes118

    • Size

      393KB

    • MD5

      282869ea3d3099da27462a267f453ab9

    • SHA1

      9418212615b8b16cf9947e3596f5ffb3245613db

    • SHA256

      8a18e5aaa4e5f9b38fcd45d898577c3e4673551d3fcb6088e617dd4371da1dbb

    • SHA512

      20910173beb7a74a71a1fdf376bc3ad1e6bc91882bec7c610dc4db862c9f3be54b4df60b92ebf202cf8a63725c6680675e84d0c1044c5a548ebd377ae1a07b2c

    • SSDEEP

      12288:/fn3KpJI6xj1dV9fJcEXW4OYIb5IiENCaTbAL:/PCb1dV9fJhXWGHNDbAL

    • Windows security bypass

    • Disables taskbar notifications via registry modification

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks