General

  • Target

    603973eaa403ca3d254f7df6893bf135_JaffaCakes118

  • Size

    393KB

  • Sample

    240720-2dwq8szdqk

  • MD5

    603973eaa403ca3d254f7df6893bf135

  • SHA1

    f5682fa3de861402f62d829d8a8913fee6d377a3

  • SHA256

    d4fd8944796825aba65107e6403c9c918ac0c4cf5a57c6915215eb40f65bfadd

  • SHA512

    a4c0fa7edae1f9510ce354e7e7b850525872af3431acd83ca2b2afcad3ea8ccf260322ee22ebb93d964374696468880208da5c2f6be7078cadd9c806b41508e1

  • SSDEEP

    6144:txg7dUShNmPhlen1GJw9B1uqY1dZHhptjYUxevM79lWzuDRsxyYZvy0TDjM7Pqj/:3g7dUmmLen1G6Lkjr7plWzuDRsVqPqj/

Malware Config

Targets

    • Target

      603973eaa403ca3d254f7df6893bf135_JaffaCakes118

    • Size

      393KB

    • MD5

      603973eaa403ca3d254f7df6893bf135

    • SHA1

      f5682fa3de861402f62d829d8a8913fee6d377a3

    • SHA256

      d4fd8944796825aba65107e6403c9c918ac0c4cf5a57c6915215eb40f65bfadd

    • SHA512

      a4c0fa7edae1f9510ce354e7e7b850525872af3431acd83ca2b2afcad3ea8ccf260322ee22ebb93d964374696468880208da5c2f6be7078cadd9c806b41508e1

    • SSDEEP

      6144:txg7dUShNmPhlen1GJw9B1uqY1dZHhptjYUxevM79lWzuDRsxyYZvy0TDjM7Pqj/:3g7dUmmLen1G6Lkjr7plWzuDRsVqPqj/

    • Windows security bypass

    • Disables taskbar notifications via registry modification

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks