General
-
Target
JaffaCakes118_c8aa0a14c70590527413778b8b816149
-
Size
1.9MB
-
Sample
250119-qc8tmayrgq
-
MD5
c8aa0a14c70590527413778b8b816149
-
SHA1
8519089630b93c63686405ae6d3065040252da82
-
SHA256
a7b0af4bb7277544ee17dbc4c3c127841941d0de09aeed2f1dd124df8d2aa2c5
-
SHA512
a0f71dd0848f771037a7a14af994750cfade9ab2f5e0330a3161de807fdfee49e8e4ef54e27f51856ff348928fd7bf915236c5d51f8e6a9fe4d0cbf572de575c
-
SSDEEP
49152:sa8QbBnW5oGvmx4UJASuA4wDinashps9AzV1pCh9mLsxN:KSBnW5d+lub3asPs9S7pcrb
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_c8aa0a14c70590527413778b8b816149.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
JaffaCakes118_c8aa0a14c70590527413778b8b816149.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
JaffaCakes118_c8aa0a14c70590527413778b8b816149
-
Size
1.9MB
-
MD5
c8aa0a14c70590527413778b8b816149
-
SHA1
8519089630b93c63686405ae6d3065040252da82
-
SHA256
a7b0af4bb7277544ee17dbc4c3c127841941d0de09aeed2f1dd124df8d2aa2c5
-
SHA512
a0f71dd0848f771037a7a14af994750cfade9ab2f5e0330a3161de807fdfee49e8e4ef54e27f51856ff348928fd7bf915236c5d51f8e6a9fe4d0cbf572de575c
-
SSDEEP
49152:sa8QbBnW5oGvmx4UJASuA4wDinashps9AzV1pCh9mLsxN:KSBnW5d+lub3asPs9S7pcrb
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Browser Extensions
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1