General

  • Target

    84ae6b1842684e97a8dbc19706244bee_JaffaCakes118

  • Size

    518KB

  • Sample

    240810-eaam9sthqn

  • MD5

    84ae6b1842684e97a8dbc19706244bee

  • SHA1

    d3375405eab22ba6d19afde0bf4ad034d59f4e7b

  • SHA256

    743a7d9820850e9ff7eff805423095a992c79e98a23cd5f020d15d83de601e6d

  • SHA512

    f0f785e1fac699239b85670ff5ab3cc57cd9a77c036007fd0347ee512bd6e8dddf52cf7e8c4fe769f3ca50e37a0cd05f73b751012b121c3ba62485e36417463d

  • SSDEEP

    3072:TQY+qH9KMcdmS9zVb2i+rJcpBBtTzEj21LgQthhJqH9KMcdmS9zVb2i+rJ:eEY9d1jyBJcpBBtrVtpEY9d1jyBJ

Malware Config

Targets

    • Target

      84ae6b1842684e97a8dbc19706244bee_JaffaCakes118

    • Size

      518KB

    • MD5

      84ae6b1842684e97a8dbc19706244bee

    • SHA1

      d3375405eab22ba6d19afde0bf4ad034d59f4e7b

    • SHA256

      743a7d9820850e9ff7eff805423095a992c79e98a23cd5f020d15d83de601e6d

    • SHA512

      f0f785e1fac699239b85670ff5ab3cc57cd9a77c036007fd0347ee512bd6e8dddf52cf7e8c4fe769f3ca50e37a0cd05f73b751012b121c3ba62485e36417463d

    • SSDEEP

      3072:TQY+qH9KMcdmS9zVb2i+rJcpBBtTzEj21LgQthhJqH9KMcdmS9zVb2i+rJ:eEY9d1jyBJcpBBtrVtpEY9d1jyBJ

    • Modifies WinLogon for persistence

    • Disables RegEdit via registry modification

    • Disables Task Manager via registry modification

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks