General
-
Target
89c742b35826d51946f74631288c1171_JaffaCakes118
-
Size
3.4MB
-
Sample
241103-ft151awbrg
-
MD5
89c742b35826d51946f74631288c1171
-
SHA1
8ea9f21f502a5af0143e363b0d05e74ffeef638d
-
SHA256
01ca2ff67af9d0c5881b6936157e9fbe697ea05174847a565ffc1c9b062a5b0a
-
SHA512
f1a09dd21c9b7527191d511341d05528e2a8c31494db86307943ae8efff4f1b0eb93cf70b08baf83e353b5e353c2bffd59702ef02d473ed0793d49a82914f9c9
-
SSDEEP
49152:d/xDnN4g3oFI/6OeutxOtkNs3UeJS6Rth+oqSOd+z7CvSCxgywSlgkvTj6YtR:d5FYi/6DKOt0qtJ3hvDwxZ91v3t
Static task
static1
Behavioral task
behavioral1
Sample
89c742b35826d51946f74631288c1171_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
89c742b35826d51946f74631288c1171_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
89c742b35826d51946f74631288c1171_JaffaCakes118
-
Size
3.4MB
-
MD5
89c742b35826d51946f74631288c1171
-
SHA1
8ea9f21f502a5af0143e363b0d05e74ffeef638d
-
SHA256
01ca2ff67af9d0c5881b6936157e9fbe697ea05174847a565ffc1c9b062a5b0a
-
SHA512
f1a09dd21c9b7527191d511341d05528e2a8c31494db86307943ae8efff4f1b0eb93cf70b08baf83e353b5e353c2bffd59702ef02d473ed0793d49a82914f9c9
-
SSDEEP
49152:d/xDnN4g3oFI/6OeutxOtkNs3UeJS6Rth+oqSOd+z7CvSCxgywSlgkvTj6YtR:d5FYi/6DKOt0qtJ3hvDwxZ91v3t
Score8/10-
Uses Session Manager for persistence
Creates Session Manager registry key to run executable early in system boot.
-
Adds Run key to start application
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Execution
Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1