General

  • Target

    8fb2745b5ba8d3425955348e6b6848b5_JaffaCakes118

  • Size

    337KB

  • Sample

    241104-hfkl7svrdt

  • MD5

    8fb2745b5ba8d3425955348e6b6848b5

  • SHA1

    ce75044ab4b27a11ad3ce96c92bc248b64f2d8e5

  • SHA256

    867d48ae904d0b280e48c3dea2f3574f95858c7c3a03f07859325417dd23369c

  • SHA512

    5f54a38a77ebe05f08f0b6a169469e4f9ebcd62030c4b2743c58ae6b60ffa64ee0d848832cbae1381cb1cc913669df366f42243abcc13666f1e144e919820ca4

  • SSDEEP

    6144:JVhk7p4oiM3rk9dnyyw4D4dTV8c444ZIJhSvOJxc57vHhfhUSJ:Nk7p1rAw4DG8cVhSvOiNhUS

Malware Config

Targets

    • Target

      8fb2745b5ba8d3425955348e6b6848b5_JaffaCakes118

    • Size

      337KB

    • MD5

      8fb2745b5ba8d3425955348e6b6848b5

    • SHA1

      ce75044ab4b27a11ad3ce96c92bc248b64f2d8e5

    • SHA256

      867d48ae904d0b280e48c3dea2f3574f95858c7c3a03f07859325417dd23369c

    • SHA512

      5f54a38a77ebe05f08f0b6a169469e4f9ebcd62030c4b2743c58ae6b60ffa64ee0d848832cbae1381cb1cc913669df366f42243abcc13666f1e144e919820ca4

    • SSDEEP

      6144:JVhk7p4oiM3rk9dnyyw4D4dTV8c444ZIJhSvOJxc57vHhfhUSJ:Nk7p1rAw4DG8cVhSvOiNhUS

    • Windows security bypass

    • Disables taskbar notifications via registry modification

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks