Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
09/04/2024, 14:29
Static task
static1
Behavioral task
behavioral1
Sample
ea32b21cde116b0ed957b3bad623ad74_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ea32b21cde116b0ed957b3bad623ad74_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ea32b21cde116b0ed957b3bad623ad74_JaffaCakes118.exe
-
Size
521KB
-
MD5
ea32b21cde116b0ed957b3bad623ad74
-
SHA1
c2ad4e16d32391de1082895c9c03efe062850b8a
-
SHA256
1327d1eff1a4b96acf4c5293f911dd49b52adaa4343e486e39214d6b9c44906d
-
SHA512
98dfc7d5d56caf803c0e82bc740f633abdfe036ae06e2a1cb255184f797402771a27a7788aee255c14bc1a7744be3ad5d77aa23ab1502e482bc9484f2b053a48
-
SSDEEP
6144:1jPBAqlz8+IO/XgMJbKKy2RsZPMolhPaZGf4iV6vhD4WwxdpFtWGCj8AFz7n0NSW:gqlvXtb1y2iZPMo3PYGQY6Iew35x7
Malware Config
Signatures
-
Drops startup file 1 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ea32b21cde116b0ed957b3bad623ad74_JaffaCakes118.lnk ea32b21cde116b0ed957b3bad623ad74_JaffaCakes118.exe -
Loads dropped DLL 1 IoCs
pid Process 2896 ea32b21cde116b0ed957b3bad623ad74_JaffaCakes118.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
\ProgramData\{a80664a2-7c21-f2b1-a806-664a27c29289}\ea32b21cde116b0ed957b3bad623ad74_JaffaCakes118.exe
Filesize521KB
MD5ea32b21cde116b0ed957b3bad623ad74
SHA1c2ad4e16d32391de1082895c9c03efe062850b8a
SHA2561327d1eff1a4b96acf4c5293f911dd49b52adaa4343e486e39214d6b9c44906d
SHA51298dfc7d5d56caf803c0e82bc740f633abdfe036ae06e2a1cb255184f797402771a27a7788aee255c14bc1a7744be3ad5d77aa23ab1502e482bc9484f2b053a48