General

  • Target

    074397733165259d5af9ba7b9c50eac7_JaffaCakes118

  • Size

    468KB

  • Sample

    241001-y12zzsscrb

  • MD5

    074397733165259d5af9ba7b9c50eac7

  • SHA1

    aa3648de95dead34c0a00381d44a5c51daf7ea7e

  • SHA256

    e743c06419024342684b0fffe4ba3dc6e35016f1635ea2393a3bde5487b45dc8

  • SHA512

    398b95dd8df9a187a9b987cfa3fbd430a19e86afeee28441e7be39e74775f56b1d42548f243d4b0badaf192379e026f3d744e74ae9a91755f9a9112785823473

  • SSDEEP

    6144:8HmfY5sRnt+g6WbjMOsjwyLdNQKGI74IkTlYn84W5h07rE5x3SPI:8H75sRYNWbjMxPLdWKGS4ll1UchY

Malware Config

Targets

    • Target

      074397733165259d5af9ba7b9c50eac7_JaffaCakes118

    • Size

      468KB

    • MD5

      074397733165259d5af9ba7b9c50eac7

    • SHA1

      aa3648de95dead34c0a00381d44a5c51daf7ea7e

    • SHA256

      e743c06419024342684b0fffe4ba3dc6e35016f1635ea2393a3bde5487b45dc8

    • SHA512

      398b95dd8df9a187a9b987cfa3fbd430a19e86afeee28441e7be39e74775f56b1d42548f243d4b0badaf192379e026f3d744e74ae9a91755f9a9112785823473

    • SSDEEP

      6144:8HmfY5sRnt+g6WbjMOsjwyLdNQKGI74IkTlYn84W5h07rE5x3SPI:8H75sRYNWbjMxPLdWKGS4ll1UchY

    • Windows security bypass

    • Disables taskbar notifications via registry modification

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks