General

  • Target

    95bb38c47a9f9c5134e01a25a196b32a_JaffaCakes118

  • Size

    89KB

  • Sample

    240814-mmvg7sscmr

  • MD5

    95bb38c47a9f9c5134e01a25a196b32a

  • SHA1

    e049b3fac5cbf0da5d60970a4ef984b0c77cfd23

  • SHA256

    6e3117177222e5c022ea5559cbfc21b26cc7df1a6c61b8797da6bfa51e317a7c

  • SHA512

    0dff6234a12ea5ee5f3d3d17d9227da099c0584fdeed560a0ec17b2ad2db37ae68568dd8ac1df7472f1fff21c3ff09227f4ec5348dd685866124a9ac45bdf274

  • SSDEEP

    1536:FaSFZ6cvAb+vMqxa4WFKJz8V4CEtHsHiCQFkrPzJhHKeNYPEsgAEPa:Fa4t4qvxWc8c2CCQe34EsgAEPa

Malware Config

Targets

    • Target

      95bb38c47a9f9c5134e01a25a196b32a_JaffaCakes118

    • Size

      89KB

    • MD5

      95bb38c47a9f9c5134e01a25a196b32a

    • SHA1

      e049b3fac5cbf0da5d60970a4ef984b0c77cfd23

    • SHA256

      6e3117177222e5c022ea5559cbfc21b26cc7df1a6c61b8797da6bfa51e317a7c

    • SHA512

      0dff6234a12ea5ee5f3d3d17d9227da099c0584fdeed560a0ec17b2ad2db37ae68568dd8ac1df7472f1fff21c3ff09227f4ec5348dd685866124a9ac45bdf274

    • SSDEEP

      1536:FaSFZ6cvAb+vMqxa4WFKJz8V4CEtHsHiCQFkrPzJhHKeNYPEsgAEPa:Fa4t4qvxWc8c2CCQe34EsgAEPa

    • Executes dropped EXE

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    • Hide Artifacts: Hidden Users

MITRE ATT&CK Enterprise v15

Tasks