General

  • Target

    8f5d9b0d9f207129b5b61f8eb0e8cc8f_JaffaCakes118

  • Size

    895KB

  • Sample

    241104-f17alatngw

  • MD5

    8f5d9b0d9f207129b5b61f8eb0e8cc8f

  • SHA1

    2066ad4e5336bd4908ba77e45ce2cfca3889360e

  • SHA256

    0f5b13127dfe052341277bbf18521399442517a7b2924edbcd97b6cfed8f4b9c

  • SHA512

    3ed74022410a65b0fc2da06f8a6aea9923240db00c7a208ff8ca68fa38e25f3372afc85df4c4b4f9dd4b69c68ed4cadcc92691a2997819feb62fac8e1b1b24c4

  • SSDEEP

    24576:JPx5q0eGKsgMSXU5+jZVfCvuXnqcSuCraGV:Nx5q0ebMSdN6EF8nV

Malware Config

Targets

    • Target

      8f5d9b0d9f207129b5b61f8eb0e8cc8f_JaffaCakes118

    • Size

      895KB

    • MD5

      8f5d9b0d9f207129b5b61f8eb0e8cc8f

    • SHA1

      2066ad4e5336bd4908ba77e45ce2cfca3889360e

    • SHA256

      0f5b13127dfe052341277bbf18521399442517a7b2924edbcd97b6cfed8f4b9c

    • SHA512

      3ed74022410a65b0fc2da06f8a6aea9923240db00c7a208ff8ca68fa38e25f3372afc85df4c4b4f9dd4b69c68ed4cadcc92691a2997819feb62fac8e1b1b24c4

    • SSDEEP

      24576:JPx5q0eGKsgMSXU5+jZVfCvuXnqcSuCraGV:Nx5q0ebMSdN6EF8nV

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks