General

  • Target

    ee296d978f06cf497738bd8b3d80cb54_JaffaCakes118

  • Size

    392KB

  • Sample

    240920-wvg2hszhmm

  • MD5

    ee296d978f06cf497738bd8b3d80cb54

  • SHA1

    fe9a59bb650b59f498e79e5e9d562d2cc70e8f65

  • SHA256

    36693b9f28e56311605c91f4c1d891398ce689cc6ff89a197de902535d031299

  • SHA512

    90d0a5b71e1f83d7a3e6f0596741c1bd1eda1ffd62610832cccdeb91d40434b695b593dbb0c2106a9f3d6f5f35f383d5f3416a4adeb601c405c1760c846cc506

  • SSDEEP

    12288:FBGGmLdw5YRXnFb4iiXJo/VqiGFIG2oNwATdv:FBGGEdwORVb4iiX2tzGyG2opT9

Malware Config

Targets

    • Target

      ee296d978f06cf497738bd8b3d80cb54_JaffaCakes118

    • Size

      392KB

    • MD5

      ee296d978f06cf497738bd8b3d80cb54

    • SHA1

      fe9a59bb650b59f498e79e5e9d562d2cc70e8f65

    • SHA256

      36693b9f28e56311605c91f4c1d891398ce689cc6ff89a197de902535d031299

    • SHA512

      90d0a5b71e1f83d7a3e6f0596741c1bd1eda1ffd62610832cccdeb91d40434b695b593dbb0c2106a9f3d6f5f35f383d5f3416a4adeb601c405c1760c846cc506

    • SSDEEP

      12288:FBGGmLdw5YRXnFb4iiXJo/VqiGFIG2oNwATdv:FBGGEdwORVb4iiX2tzGyG2opT9

    • Windows security bypass

    • Disables taskbar notifications via registry modification

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks