General
-
Target
de6ff68ab5cbd033251b83dfadc6372a_JaffaCakes118
-
Size
538KB
-
Sample
240913-sygy5svgqp
-
MD5
de6ff68ab5cbd033251b83dfadc6372a
-
SHA1
803649a7a8701bdef529da91bfa26d14c611d134
-
SHA256
9a58e21b5e7f902404fd23b7e8cf7debf79acbdd41045f4425564d74c719a018
-
SHA512
09a07743f6787552e01321bd9e55657dd07e302f3471898b565ff307f2a9d01c039933175258ac11ee9d3b974b1e4928a7fc57cfbc66abc102c1207072b600ff
-
SSDEEP
6144:UZfec9EbXDk6RkdKWnmy+g4IE2EorG1VVE+IRuHOJnmy+g4IE2EorG1VVE+I6:UZWtI6Rkzaku9OJaku5
Static task
static1
Behavioral task
behavioral1
Sample
de6ff68ab5cbd033251b83dfadc6372a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
de6ff68ab5cbd033251b83dfadc6372a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
de6ff68ab5cbd033251b83dfadc6372a_JaffaCakes118
-
Size
538KB
-
MD5
de6ff68ab5cbd033251b83dfadc6372a
-
SHA1
803649a7a8701bdef529da91bfa26d14c611d134
-
SHA256
9a58e21b5e7f902404fd23b7e8cf7debf79acbdd41045f4425564d74c719a018
-
SHA512
09a07743f6787552e01321bd9e55657dd07e302f3471898b565ff307f2a9d01c039933175258ac11ee9d3b974b1e4928a7fc57cfbc66abc102c1207072b600ff
-
SSDEEP
6144:UZfec9EbXDk6RkdKWnmy+g4IE2EorG1VVE+IRuHOJnmy+g4IE2EorG1VVE+I6:UZWtI6Rkzaku9OJaku5
-
Modifies visibility of file extensions in Explorer
-
Blocks application from running via registry modification
Adds application to list of disallowed applications.
-
Event Triggered Execution: Image File Execution Options Injection
-
Executes dropped EXE
-
Loads dropped DLL
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Image File Execution Options Injection
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Image File Execution Options Injection
1Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Indicator Removal
1File Deletion
1Modify Registry
1