General
-
Target
38b5cc0773699d6536eba27cacdcd1fc_JaffaCakes118
-
Size
210KB
-
Sample
240711-masg3svbqc
-
MD5
38b5cc0773699d6536eba27cacdcd1fc
-
SHA1
e412d6d5dbfaaab9017c80e311871a5d8941d6c8
-
SHA256
f386192c278e40f790f316cd123269d6e1a4ca2b77487c16bd11e302517186e6
-
SHA512
b1e6dd4c3c236cb46cab900f9a7f03d0881623f753d2ad08de032a2c2c733ce51c000583ebba9626809fc9a3d86268ea9232c1778e3b79a2dc066f949bbd20e0
-
SSDEEP
6144:MRAhhJxX7bNIAROzTb2uuXp+7qxwGvE/SV22:UsAAM2dZYFEGSX
Static task
static1
Behavioral task
behavioral1
Sample
38b5cc0773699d6536eba27cacdcd1fc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
38b5cc0773699d6536eba27cacdcd1fc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
38b5cc0773699d6536eba27cacdcd1fc_JaffaCakes118
-
Size
210KB
-
MD5
38b5cc0773699d6536eba27cacdcd1fc
-
SHA1
e412d6d5dbfaaab9017c80e311871a5d8941d6c8
-
SHA256
f386192c278e40f790f316cd123269d6e1a4ca2b77487c16bd11e302517186e6
-
SHA512
b1e6dd4c3c236cb46cab900f9a7f03d0881623f753d2ad08de032a2c2c733ce51c000583ebba9626809fc9a3d86268ea9232c1778e3b79a2dc066f949bbd20e0
-
SSDEEP
6144:MRAhhJxX7bNIAROzTb2uuXp+7qxwGvE/SV22:UsAAM2dZYFEGSX
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Modifies system executable filetype association
-
Adds Run key to start application
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Change Default File Association
1