Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
09/04/2024, 02:01
General
-
Target
e8f52e1faf27cdd742d932e671423383_JaffaCakes118.exe
-
Size
258KB
-
MD5
e8f52e1faf27cdd742d932e671423383
-
SHA1
baad7475a6212ded54713ce8de634b53267cc8d3
-
SHA256
12e874e00853c324261bc4467e3c5dc2d7d741675ecde575fb9a14bd6df1e21b
-
SHA512
3de3c9bd051366fc4f23e50705c8de4cf1f28789b0f312aa3747561a6b0e12bb6c68e737c701dc0f0816d08df61a2fed9880d92fc35d5f55c2fbe6190239b608
-
SSDEEP
6144:TwyXAg0H8m5rn4v5hE0JQCnwr97YTrwnKZ:Yg0Hfrn4vrnwrZYTknKZ
Score
6/10
Malware Config
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry 3 TTPs 2 IoCs
Disk information is often read in order to detect sandboxing environments.
-
Drops file in Windows directory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e8f52e1faf27cdd742d932e671423383_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\e8f52e1faf27cdd742d932e671423383_JaffaCakes118.exe"1⤵
- Maps connected drives based on registry
- Drops file in Windows directory
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
164KB
-
Filesize
164KB
-
Filesize
188KB
-
Filesize
156KB
-
Filesize
164KB
-
Filesize
164KB