Overview

overview

6

Static

static

3

0a102bbaab...18.exe

windows7-x64

6

0a102bbaab...18.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    134s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 16:09

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    0a102bbaab6b9363b5cf0a9f48dd35ff_JaffaCakes118.exe

  • Size

    116KB

  • MD5

    0a102bbaab6b9363b5cf0a9f48dd35ff

  • SHA1

    3defdd32f282c8e2daf88546611e0bc11b3c03d6

  • SHA256

    b823934523f7d93c3b79568b22cbabf526242104743e98c9d651a63e5b1723c9

  • SHA512

    f11428985a4d9bb303541d45b138803a800666ced9360571b94918e7c96fc8676368e49d8696c981436c46ae79dc216ba0d839f9333e8eb2526c02731c66d1b4

  • SSDEEP

    1536:vc+gjdZzGB9bQNMeHq5ixZGLgyBmK8zccAy5mE1biojuIaWDhMgzVkQGDax2D:vcPdZ+JsaVBzMhD9hxa

Score
6/10
persistence

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Uses Tor communications 1 TTPs

    Malware can proxy its traffic through Tor for more anonymity.

Processes

  • C:\Users\Admin\AppData\Local\Temp\0a102bbaab6b9363b5cf0a9f48dd35ff_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\0a102bbaab6b9363b5cf0a9f48dd35ff_JaffaCakes118.exe"
    1⤵
    • Adds Run key to start application
    PID:2328

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads