General

  • Target

    bd456e98a6a03e12851dce0a7af06098_JaffaCakes118

  • Size

    404KB

  • Sample

    240823-1mcjaaydkf

  • MD5

    bd456e98a6a03e12851dce0a7af06098

  • SHA1

    4dd7f253a359dc21e67920ccbdf3725c67849737

  • SHA256

    2498340a4761da2428629087a934db2a81f1bdb7583250b5996d428a0a137fda

  • SHA512

    19b12944dbd65245d8dc709ccdca6718a7d6f91802ead7f6fbe7d6e45ba814d17f4a19ec0b5e92b6ad6f340cec1259357bb6d708f20f32e6bf774889f1a0bc86

  • SSDEEP

    6144:ZeFCibfTukN+KIb3wSVu6H1PAS7BCmGP0dtTwTnf1jGINTky8lYZ20V+yobSCwmh:ZeF73Ny7H1PDFfGsdUnNjuygzbSVS

Malware Config

Targets

    • Target

      bd456e98a6a03e12851dce0a7af06098_JaffaCakes118

    • Size

      404KB

    • MD5

      bd456e98a6a03e12851dce0a7af06098

    • SHA1

      4dd7f253a359dc21e67920ccbdf3725c67849737

    • SHA256

      2498340a4761da2428629087a934db2a81f1bdb7583250b5996d428a0a137fda

    • SHA512

      19b12944dbd65245d8dc709ccdca6718a7d6f91802ead7f6fbe7d6e45ba814d17f4a19ec0b5e92b6ad6f340cec1259357bb6d708f20f32e6bf774889f1a0bc86

    • SSDEEP

      6144:ZeFCibfTukN+KIb3wSVu6H1PAS7BCmGP0dtTwTnf1jGINTky8lYZ20V+yobSCwmh:ZeF73Ny7H1PDFfGsdUnNjuygzbSVS

    • Windows security bypass

    • Disables taskbar notifications via registry modification

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks