Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/04/2024, 01:41

General

  • Target

    e8ebf5cd242d3b583eac4acb8c75145f_JaffaCakes118.dll

  • Size

    250KB

  • MD5

    e8ebf5cd242d3b583eac4acb8c75145f

  • SHA1

    0cf4d6fa90f3724ffcf31ab38282f0dfd524be05

  • SHA256

    129210393137568401849c616b3a9b097db6b381697b4566957c898549d4dab8

  • SHA512

    61c5a71bd533d76d01db32b9b1d19d623420129d698413d2fa8e5d41fa4496429ca9b07ad78f3a2e3cbf242d18c8a5538d460839b1cc4854d0e15bae76676d30

  • SSDEEP

    6144:kr72S8iPKc/27KjT/ZwnNBTVOTBBUy3wqqwkMs3:G72+Kc/XjT6jGAqqF

Score
7/10

Malware Config

Signatures

  • Registers COM server for autorun 1 TTPs 3 IoCs
  • Drops file in Windows directory 1 IoCs
  • Modifies registry class 48 IoCs

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\e8ebf5cd242d3b583eac4acb8c75145f_JaffaCakes118.dll
    1⤵
    • Registers COM server for autorun
    • Drops file in Windows directory
    • Modifies registry class
    PID:2864

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads