General
-
Target
412938390176685f2a7daef6bb908b94_JaffaCakes118
-
Size
1.0MB
-
Sample
240713-lq5a5swbrl
-
MD5
412938390176685f2a7daef6bb908b94
-
SHA1
3229dfee35d0281e81845b6e635e2884da4c1e0f
-
SHA256
5d5947ff74a22384d00a31da43486f9d0312f4683121dd25eb7b1454238f60b7
-
SHA512
7ffb4d3c618285a8b57d6886c2609b895422092b852c3d25eecbb97c371b70d58f7276a9296fb7cf1486fa86e35c85f4e49ae8a6d760d872f2fec01fbb20d587
-
SSDEEP
12288:gOxBuOB0Ju0UOB0fOhOB0heZJys73dOvXDpNjNe8LOwOB0heZJys73dOvXDpNjNU:XBuOXO3OieZJ8NI8XOieZJ8NI8Du
Malware Config
Targets
-
-
Target
412938390176685f2a7daef6bb908b94_JaffaCakes118
-
Size
1.0MB
-
MD5
412938390176685f2a7daef6bb908b94
-
SHA1
3229dfee35d0281e81845b6e635e2884da4c1e0f
-
SHA256
5d5947ff74a22384d00a31da43486f9d0312f4683121dd25eb7b1454238f60b7
-
SHA512
7ffb4d3c618285a8b57d6886c2609b895422092b852c3d25eecbb97c371b70d58f7276a9296fb7cf1486fa86e35c85f4e49ae8a6d760d872f2fec01fbb20d587
-
SSDEEP
12288:gOxBuOB0Ju0UOB0fOhOB0heZJys73dOvXDpNjNe8LOwOB0heZJys73dOvXDpNjNU:XBuOXO3OieZJ8NI8XOieZJ8NI8Du
Score10/10-
Disables service(s)
-
Modifies visibility of file extensions in Explorer
-
Blocks application from running via registry modification
Adds application to list of disallowed applications.
-
Event Triggered Execution: Image File Execution Options Injection
-
Executes dropped EXE
-
Loads dropped DLL
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Image File Execution Options Injection
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Image File Execution Options Injection
1