General

  • Target

    8e493f8bb510faf898ec931213f965c4_JaffaCakes118

  • Size

    391KB

  • Sample

    240812-lysbjswbqj

  • MD5

    8e493f8bb510faf898ec931213f965c4

  • SHA1

    8e2b203f05a97fdab4af1d21ce9e3a7452854f56

  • SHA256

    1924ad77e6dbfc797ee854aef730ce533af54350a68f2606fbd61f6eb3faed0a

  • SHA512

    3cb570852657b35cca2f76d221a1998db207ceb607813d56f0a137df78b8489f10b7fd5ec1c6256baa9cdcc2516c759a9594dc6808f67a03e5e70abbd4588544

  • SSDEEP

    6144:4wsHp6Q1zs2JMdfiyTWgS6I+QrXzINENgiYA5j4urS7E/u2WJVSML:49Hp6Q14ayTdSp+QrXsN0B5j4NI22qL

Malware Config

Targets

    • Target

      8e493f8bb510faf898ec931213f965c4_JaffaCakes118

    • Size

      391KB

    • MD5

      8e493f8bb510faf898ec931213f965c4

    • SHA1

      8e2b203f05a97fdab4af1d21ce9e3a7452854f56

    • SHA256

      1924ad77e6dbfc797ee854aef730ce533af54350a68f2606fbd61f6eb3faed0a

    • SHA512

      3cb570852657b35cca2f76d221a1998db207ceb607813d56f0a137df78b8489f10b7fd5ec1c6256baa9cdcc2516c759a9594dc6808f67a03e5e70abbd4588544

    • SSDEEP

      6144:4wsHp6Q1zs2JMdfiyTWgS6I+QrXzINENgiYA5j4urS7E/u2WJVSML:49Hp6Q14ayTdSp+QrXsN0B5j4NI22qL

    • Windows security bypass

    • Disables taskbar notifications via registry modification

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks