General

  • Target

    3e9edccb1ad390dd648e4e27f871f2fb_JaffaCakes118

  • Size

    360KB

  • Sample

    240712-ycbg5azbrg

  • MD5

    3e9edccb1ad390dd648e4e27f871f2fb

  • SHA1

    0ec2db073989ce2b6ac9390c18e79743891df7f8

  • SHA256

    4f09b4ad0ffb43e1ed0143ead32d85ec75128d55e470b786305fd31d9701fdda

  • SHA512

    dbf2115a92ce1b200822bff71f86e9ea23256556aec4b8819badc6a02e940fe673797736ccfed55b19d49a2b75fc3574892f73c35dc5e41bdb5509034ad306be

  • SSDEEP

    6144:MIsSI4sf/V5bl+fP2cYmd1DtC0XcSVEM+ukwGq/y5RWDBgp1kc:MIsSn6rbIfPpNXcS5+ukbbWDQ1k

Malware Config

Targets

    • Target

      3e9edccb1ad390dd648e4e27f871f2fb_JaffaCakes118

    • Size

      360KB

    • MD5

      3e9edccb1ad390dd648e4e27f871f2fb

    • SHA1

      0ec2db073989ce2b6ac9390c18e79743891df7f8

    • SHA256

      4f09b4ad0ffb43e1ed0143ead32d85ec75128d55e470b786305fd31d9701fdda

    • SHA512

      dbf2115a92ce1b200822bff71f86e9ea23256556aec4b8819badc6a02e940fe673797736ccfed55b19d49a2b75fc3574892f73c35dc5e41bdb5509034ad306be

    • SSDEEP

      6144:MIsSI4sf/V5bl+fP2cYmd1DtC0XcSVEM+ukwGq/y5RWDBgp1kc:MIsSn6rbIfPpNXcS5+ukbbWDQ1k

    • Windows security bypass

    • Disables taskbar notifications via registry modification

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks