General

  • Target

    JaffaCakes118_1c5838800ff97720b150b6414f4a0cfc

  • Size

    341KB

  • Sample

    250704-tkt7zswnt7

  • MD5

    1c5838800ff97720b150b6414f4a0cfc

  • SHA1

    80030091fe15085b6f11ae7a310819cc98eb0d3c

  • SHA256

    7292ab6d07bab88c5dec542de2ffa7aef7d0ee32376004166ed37d3b42319a87

  • SHA512

    55b7fd4bf1e390caf2d50bfde67a8800e04ad2608f867b61eccab62c3dfea85fed3158f8d1dbce92a7583ea9cdba45a9e749cc9be91d3eeb2304fe9de93cfe34

  • SSDEEP

    6144:A5+fB9fGQzG0ZVuiXvMw5rd6f3anpUbToa1:4+p9fLy0KMM1

Malware Config

Targets

    • Target

      JaffaCakes118_1c5838800ff97720b150b6414f4a0cfc

    • Size

      341KB

    • MD5

      1c5838800ff97720b150b6414f4a0cfc

    • SHA1

      80030091fe15085b6f11ae7a310819cc98eb0d3c

    • SHA256

      7292ab6d07bab88c5dec542de2ffa7aef7d0ee32376004166ed37d3b42319a87

    • SHA512

      55b7fd4bf1e390caf2d50bfde67a8800e04ad2608f867b61eccab62c3dfea85fed3158f8d1dbce92a7583ea9cdba45a9e749cc9be91d3eeb2304fe9de93cfe34

    • SSDEEP

      6144:A5+fB9fGQzG0ZVuiXvMw5rd6f3anpUbToa1:4+p9fLy0KMM1

    • Modifies Shared Task Scheduler registry keys

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks