General
-
Target
dec66d562ca85cd6ea9015e5fcc0b0fe_JaffaCakes118
-
Size
1.9MB
-
Sample
240913-ydgqjavgrb
-
MD5
dec66d562ca85cd6ea9015e5fcc0b0fe
-
SHA1
910a50da9e68889edaff6535f4f3c8a996988a92
-
SHA256
955f1d17a5ca16cca897f2f0042bdbb9bf74b8802b0f3574dcfdf3d633aa7595
-
SHA512
eed2ac3ee44b21a33b971e88dd97fa371c44897813e00518ee59aac12bd11953740af279d1c94badb54ff889735993a3abde4a4360588e0b841efaded1156817
-
SSDEEP
24576:Uuha/eZJ8NI8TOneZJ8NI8TOneZJ8NI8TOneZJ8NI8TO4Q:bN8t8t8t85Q
Static task
static1
Behavioral task
behavioral1
Sample
dec66d562ca85cd6ea9015e5fcc0b0fe_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dec66d562ca85cd6ea9015e5fcc0b0fe_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
dec66d562ca85cd6ea9015e5fcc0b0fe_JaffaCakes118
-
Size
1.9MB
-
MD5
dec66d562ca85cd6ea9015e5fcc0b0fe
-
SHA1
910a50da9e68889edaff6535f4f3c8a996988a92
-
SHA256
955f1d17a5ca16cca897f2f0042bdbb9bf74b8802b0f3574dcfdf3d633aa7595
-
SHA512
eed2ac3ee44b21a33b971e88dd97fa371c44897813e00518ee59aac12bd11953740af279d1c94badb54ff889735993a3abde4a4360588e0b841efaded1156817
-
SSDEEP
24576:Uuha/eZJ8NI8TOneZJ8NI8TOneZJ8NI8TOneZJ8NI8TO4Q:bN8t8t8t85Q
-
Modifies visibility of file extensions in Explorer
-
Blocks application from running via registry modification
Adds application to list of disallowed applications.
-
Event Triggered Execution: Image File Execution Options Injection
-
Executes dropped EXE
-
Loads dropped DLL
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Image File Execution Options Injection
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Image File Execution Options Injection
1Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Indicator Removal
1File Deletion
1Modify Registry
1