General

  • Target

    89c742b35826d51946f74631288c1171_JaffaCakes118

  • Size

    3.4MB

  • Sample

    241103-ft151awbrg

  • MD5

    89c742b35826d51946f74631288c1171

  • SHA1

    8ea9f21f502a5af0143e363b0d05e74ffeef638d

  • SHA256

    01ca2ff67af9d0c5881b6936157e9fbe697ea05174847a565ffc1c9b062a5b0a

  • SHA512

    f1a09dd21c9b7527191d511341d05528e2a8c31494db86307943ae8efff4f1b0eb93cf70b08baf83e353b5e353c2bffd59702ef02d473ed0793d49a82914f9c9

  • SSDEEP

    49152:d/xDnN4g3oFI/6OeutxOtkNs3UeJS6Rth+oqSOd+z7CvSCxgywSlgkvTj6YtR:d5FYi/6DKOt0qtJ3hvDwxZ91v3t

Malware Config

Targets

    • Target

      89c742b35826d51946f74631288c1171_JaffaCakes118

    • Size

      3.4MB

    • MD5

      89c742b35826d51946f74631288c1171

    • SHA1

      8ea9f21f502a5af0143e363b0d05e74ffeef638d

    • SHA256

      01ca2ff67af9d0c5881b6936157e9fbe697ea05174847a565ffc1c9b062a5b0a

    • SHA512

      f1a09dd21c9b7527191d511341d05528e2a8c31494db86307943ae8efff4f1b0eb93cf70b08baf83e353b5e353c2bffd59702ef02d473ed0793d49a82914f9c9

    • SSDEEP

      49152:d/xDnN4g3oFI/6OeutxOtkNs3UeJS6Rth+oqSOd+z7CvSCxgywSlgkvTj6YtR:d5FYi/6DKOt0qtJ3hvDwxZ91v3t

    • Stops running service(s)

    • Uses Session Manager for persistence

      Creates Session Manager registry key to run executable early in system boot.

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks