General

  • Target

    33cd5900241ba39b57ef832d92147703_JaffaCakes118

  • Size

    360KB

  • Sample

    240710-jc596swhjd

  • MD5

    33cd5900241ba39b57ef832d92147703

  • SHA1

    2d7250fea63e8d6d79c46db354183a826dc936b4

  • SHA256

    adc75489f93f7cb1001c2787d885239a3e80f05fa67b4b129821d7eed611e524

  • SHA512

    ecb719303f7e270c14bab43d53aa22b850382fb198697e6ecf1c4ca829a6f8e3ffffd1ee6b0aace73ee2f43e5170ddaba96680e5668c357bab52218505fd8fdd

  • SSDEEP

    6144:GTC8HjYRTSC2cYVJQr4qaQJmiuloY8HKCflH04lUoAFtbIsiB:GTCb7+JZi0i5tU4lAFtbK

Malware Config

Targets

    • Target

      33cd5900241ba39b57ef832d92147703_JaffaCakes118

    • Size

      360KB

    • MD5

      33cd5900241ba39b57ef832d92147703

    • SHA1

      2d7250fea63e8d6d79c46db354183a826dc936b4

    • SHA256

      adc75489f93f7cb1001c2787d885239a3e80f05fa67b4b129821d7eed611e524

    • SHA512

      ecb719303f7e270c14bab43d53aa22b850382fb198697e6ecf1c4ca829a6f8e3ffffd1ee6b0aace73ee2f43e5170ddaba96680e5668c357bab52218505fd8fdd

    • SSDEEP

      6144:GTC8HjYRTSC2cYVJQr4qaQJmiuloY8HKCflH04lUoAFtbIsiB:GTCb7+JZi0i5tU4lAFtbK

    • Windows security bypass

    • Disables taskbar notifications via registry modification

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks