Analysis
- max time kernel
147s - max time network
155s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
- submitted
08/04/2024, 02:32
General
- Target e66df0a129d377b50fdd23f8a5c0481d_JaffaCakes118.exe
- Size 3.8MB
- Sample240408-c1enssec6t
- SHA256 582966810437bbb01f1e920010d1c32a2bedf4863b71d035e1ec1968d532ff3f
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e66df0a129d377b50fdd23f8a5c0481d_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\e66df0a129d377b50fdd23f8a5c0481d_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
tools.dll
memory/4588-19-0x0000000003210000-0x0000000003220000-memory.dmp
memory/4588-20-0x0000000074930000-0x0000000074EE1000-memory.dmp
memory/4588-24-0x0000000074930000-0x0000000074EE1000-memory.dmp
memory/4588-25-0x0000000003210000-0x0000000003220000-memory.dmp
memory/4588-27-0x0000000003210000-0x0000000003220000-memory.dmp
memory/4588-29-0x0000000003210000-0x0000000003220000-memory.dmp
memory/4588-30-0x0000000003210000-0x0000000003220000-memory.dmp
memory/4588-31-0x0000000003210000-0x0000000003220000-memory.dmp
memory/4588-32-0x0000000074930000-0x0000000074EE1000-memory.dmp
memory/4588-33-0x0000000003210000-0x0000000003220000-memory.dmp
memory/4588-34-0x0000000003210000-0x0000000003220000-memory.dmp
memory/4588-35-0x0000000003210000-0x0000000003220000-memory.dmp
memory/4588-36-0x0000000003210000-0x0000000003220000-memory.dmp
memory/4588-37-0x0000000003210000-0x0000000003220000-memory.dmp
memory/4588-38-0x0000000003210000-0x0000000003220000-memory.dmp