General

  • Target

    ed085ecc009da7f32a9bc9d2811b6a83_JaffaCakes118

  • Size

    408KB

  • Sample

    240920-he9vpstbkf

  • MD5

    ed085ecc009da7f32a9bc9d2811b6a83

  • SHA1

    627a6a0ac4e35b7a41cb88561a5a7580079cbf2a

  • SHA256

    6227f2654d0f7658518171ec9d769f9d984e7ab5904e055a281c7fb425ccaa25

  • SHA512

    755106e13907a3971f00045b98cefde591f75bcd50f71c193f2c11a03cd76b343661f3b051ef0cf67e4a9cd8de1366141cb6464d23196fa6d621c55ad12568ea

  • SSDEEP

    6144:OM0UGjObz9Y8037QEe5UmNk5A/j+Gw2mdlaS/nTjCI7B7NUL2O5N4NV:OM0BKbU7gemKijzmzaoi+ByLN/EV

Malware Config

Targets

    • Target

      ed085ecc009da7f32a9bc9d2811b6a83_JaffaCakes118

    • Size

      408KB

    • MD5

      ed085ecc009da7f32a9bc9d2811b6a83

    • SHA1

      627a6a0ac4e35b7a41cb88561a5a7580079cbf2a

    • SHA256

      6227f2654d0f7658518171ec9d769f9d984e7ab5904e055a281c7fb425ccaa25

    • SHA512

      755106e13907a3971f00045b98cefde591f75bcd50f71c193f2c11a03cd76b343661f3b051ef0cf67e4a9cd8de1366141cb6464d23196fa6d621c55ad12568ea

    • SSDEEP

      6144:OM0UGjObz9Y8037QEe5UmNk5A/j+Gw2mdlaS/nTjCI7B7NUL2O5N4NV:OM0BKbU7gemKijzmzaoi+ByLN/EV

    • Windows security bypass

    • Disables taskbar notifications via registry modification

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks