General

  • Target

    4f8b232e9457f18be375b581686fa3b1_JaffaCakes118

  • Size

    87KB

  • Sample

    241016-27vq2aycqd

  • MD5

    4f8b232e9457f18be375b581686fa3b1

  • SHA1

    9b23300034ef4da04d59b0e1c769b47e196759e6

  • SHA256

    1ad13998ccd9c464bcc99a520821b67c24fdb2268bfa9fe4c5cc85dc16ead024

  • SHA512

    d7f310143860b44713047aa174066450ab02739fda1b15ede3555a3d3a43d039aa632ecf710e82bb56fd6b6e64297c6f78f847f88344d114e5353c9a7fd9a375

  • SSDEEP

    1536:56jasnxpEezz5/6HEaPu1dMCzeUlrLNPl5bsfd1MCNFkmhuvfjUWhvjvD/9VPORo:56jasnx7zz5/6HEGuP1aUXNvE1TPkm8b

Malware Config

Targets

    • Target

      4f8b232e9457f18be375b581686fa3b1_JaffaCakes118

    • Size

      87KB

    • MD5

      4f8b232e9457f18be375b581686fa3b1

    • SHA1

      9b23300034ef4da04d59b0e1c769b47e196759e6

    • SHA256

      1ad13998ccd9c464bcc99a520821b67c24fdb2268bfa9fe4c5cc85dc16ead024

    • SHA512

      d7f310143860b44713047aa174066450ab02739fda1b15ede3555a3d3a43d039aa632ecf710e82bb56fd6b6e64297c6f78f847f88344d114e5353c9a7fd9a375

    • SSDEEP

      1536:56jasnxpEezz5/6HEaPu1dMCzeUlrLNPl5bsfd1MCNFkmhuvfjUWhvjvD/9VPORo:56jasnx7zz5/6HEGuP1aUXNvE1TPkm8b

    • Modifies visibility of file extensions in Explorer

    • Modifies visiblity of hidden/system files in Explorer

    • Blocklisted process makes network request

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks