General
-
Target
d3926c64a8ed1b7e5652c2de35df4cdb_JaffaCakes118
-
Size
557KB
-
Sample
240908-fe4ycaxemq
-
MD5
d3926c64a8ed1b7e5652c2de35df4cdb
-
SHA1
4547bd862dac6b57c5967888197ffeabd943809e
-
SHA256
45df69dd1fc5dd766642a1238f71b85ad42248179782d02426fda3e125ae0172
-
SHA512
fe3ca2836a33df303bd11d4aee68b7e3da36284b8f7b8138327f9bf4ee7b637943acf8481d2aa0687f6c17a19ae3807eb9427f56a93bb7dc70a0e37924459349
-
SSDEEP
6144:UZfec9EbXDk6RkdKWnmy+g4g/UOPSe570Szp3b/UOPSe570Szp3bE2EorG1VVE+t:UZWtI6RkzUOB0vOB0vkut
Static task
static1
Behavioral task
behavioral1
Sample
d3926c64a8ed1b7e5652c2de35df4cdb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d3926c64a8ed1b7e5652c2de35df4cdb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
d3926c64a8ed1b7e5652c2de35df4cdb_JaffaCakes118
-
Size
557KB
-
MD5
d3926c64a8ed1b7e5652c2de35df4cdb
-
SHA1
4547bd862dac6b57c5967888197ffeabd943809e
-
SHA256
45df69dd1fc5dd766642a1238f71b85ad42248179782d02426fda3e125ae0172
-
SHA512
fe3ca2836a33df303bd11d4aee68b7e3da36284b8f7b8138327f9bf4ee7b637943acf8481d2aa0687f6c17a19ae3807eb9427f56a93bb7dc70a0e37924459349
-
SSDEEP
6144:UZfec9EbXDk6RkdKWnmy+g4g/UOPSe570Szp3b/UOPSe570Szp3bE2EorG1VVE+t:UZWtI6RkzUOB0vOB0vkut
-
Modifies visibility of file extensions in Explorer
-
Blocks application from running via registry modification
Adds application to list of disallowed applications.
-
Event Triggered Execution: Image File Execution Options Injection
-
Executes dropped EXE
-
Loads dropped DLL
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Image File Execution Options Injection
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Image File Execution Options Injection
1Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Indicator Removal
1File Deletion
1Modify Registry
1