General
-
Target
37d19ecf108e46bde57dcbb21fd00803_JaffaCakes118
-
Size
1.4MB
-
Sample
240711-ftte6ashne
-
MD5
37d19ecf108e46bde57dcbb21fd00803
-
SHA1
b4e62ca3c846de0e7e5fec9140ae3701618c155b
-
SHA256
128d2236963e42f207020ea33c2db90aaaf31408a1b79e0d2536916f61d6f7e8
-
SHA512
d69d18dd2c459fc9590228463608e9f26f2a43eb99f36fe9926fe532e34515d7b6d686b9314ce2edc6a1d29a7d723aef264a9783ff1938f22fb4586ed6306a42
-
SSDEEP
24576:3uha6erQZb+md4wmWOaerQZb+md4wmWOZA:Y7erQZbd22erQZbd2+
Malware Config
Targets
-
-
Target
37d19ecf108e46bde57dcbb21fd00803_JaffaCakes118
-
Size
1.4MB
-
MD5
37d19ecf108e46bde57dcbb21fd00803
-
SHA1
b4e62ca3c846de0e7e5fec9140ae3701618c155b
-
SHA256
128d2236963e42f207020ea33c2db90aaaf31408a1b79e0d2536916f61d6f7e8
-
SHA512
d69d18dd2c459fc9590228463608e9f26f2a43eb99f36fe9926fe532e34515d7b6d686b9314ce2edc6a1d29a7d723aef264a9783ff1938f22fb4586ed6306a42
-
SSDEEP
24576:3uha6erQZb+md4wmWOaerQZb+md4wmWOZA:Y7erQZbd22erQZbd2+
Score10/10-
Disables service(s)
-
Modifies visibility of file extensions in Explorer
-
Blocks application from running via registry modification
Adds application to list of disallowed applications.
-
Event Triggered Execution: Image File Execution Options Injection
-
Executes dropped EXE
-
Loads dropped DLL
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Image File Execution Options Injection
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Image File Execution Options Injection
1