General
-
Target
3acd3beebaad8b7d1648347f03f6f2ef_JaffaCakes118
-
Size
534KB
-
Sample
240711-1gsy3svfnq
-
MD5
3acd3beebaad8b7d1648347f03f6f2ef
-
SHA1
163befe5a4f18478dc2baf76d04546fc78a08621
-
SHA256
06b935f8710775424e7c9a82e202012ba15df02f35809e3c07eec30ba8f0906a
-
SHA512
0d15299e371c1d719930a311cb5660f6f7cfc26c904c41b5df65ff9f365afbbdf5c8e09e9edb2dd1bb5f51f6b5e9992ba7fbb50e132674c91dacb5e78b53ec75
-
SSDEEP
12288:UsAL/W5L/SZdSCvTF+bDTqXTa7v5ougtHEg/7Q4hvayCRw/R:UsW/WNSZ8CLGETEjgXs4hIe
Static task
static1
Behavioral task
behavioral1
Sample
3acd3beebaad8b7d1648347f03f6f2ef_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3acd3beebaad8b7d1648347f03f6f2ef_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
3acd3beebaad8b7d1648347f03f6f2ef_JaffaCakes118
-
Size
534KB
-
MD5
3acd3beebaad8b7d1648347f03f6f2ef
-
SHA1
163befe5a4f18478dc2baf76d04546fc78a08621
-
SHA256
06b935f8710775424e7c9a82e202012ba15df02f35809e3c07eec30ba8f0906a
-
SHA512
0d15299e371c1d719930a311cb5660f6f7cfc26c904c41b5df65ff9f365afbbdf5c8e09e9edb2dd1bb5f51f6b5e9992ba7fbb50e132674c91dacb5e78b53ec75
-
SSDEEP
12288:UsAL/W5L/SZdSCvTF+bDTqXTa7v5ougtHEg/7Q4hvayCRw/R:UsW/WNSZ8CLGETEjgXs4hIe
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Modifies system executable filetype association
-
Adds Run key to start application
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Change Default File Association
1