Analysis
-
max time kernel
144s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
10/04/2024, 17:26
General
-
Target
eb9b03a776a327680543a3c3085aa000_JaffaCakes118.exe
-
Size
649KB
-
MD5
eb9b03a776a327680543a3c3085aa000
-
SHA1
13ded02f8a3ce0ed2a81c0c6dfb1adedbcde89e4
-
SHA256
8decbff81fe33a0f2b9f037c87885bb6e5f1af2171a0a4471b2737b5c93aff1b
-
SHA512
8b0c8afc09550e243ec159184c43f7d0e52cac0c40812466fa7982cb5c89052987ff480bd82b8385cc43d5a27d63ba748708fc4c0a8bbdf9073ad05f867204e8
-
SSDEEP
12288:bN2EkJysKFyCYDkib34253mYCog78YZyYNPqIVtqacxI0yeIB:bNeJysKFmtb42EXog78CyMv3ncynn
Malware Config
Signatures
-
Drops desktop.ini file(s) 2 IoCs
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Drops file in Windows directory 3 IoCs
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 25 IoCs
-
Suspicious use of AdjustPrivilegeToken 5 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\eb9b03a776a327680543a3c3085aa000_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\eb9b03a776a327680543a3c3085aa000_JaffaCakes118.exe"1⤵
- Drops desktop.ini file(s)
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\Microsoft.NET\Framework\v2.0.50727\dw20.exedw20.exe -x -s 17242⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
960KB
-
Filesize
244KB
-
Filesize
960KB
-
Filesize
244KB
-
Filesize
4KB
-
Filesize
2.1MB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
64KB
-
Filesize
2.5MB
-
Filesize
908KB
-
Filesize
5.7MB
-
Filesize
364KB
-
Filesize
120KB
-
Filesize
564KB
-
Filesize
960KB
-
Filesize
2.1MB
-
Filesize
492KB
-
Filesize
1.1MB
-
Filesize
144KB
-
Filesize
764KB
-
Filesize
764KB
-
Filesize
5.7MB
-
Filesize
564KB
-
Filesize
468KB
-
Filesize
328KB
-
Filesize
564KB
-
Filesize
276KB
-
Filesize
60KB
-
Filesize
32KB
-
Filesize
5.7MB
-
Filesize
2.5MB
-
Filesize
32KB
-
Filesize
24KB
-
Filesize
120KB
-
Filesize
364KB
-
Filesize
464KB
-
Filesize
24KB
-
Filesize
96KB
-
Filesize
396KB
-
Filesize
1000KB
-
Filesize
564KB
-
Filesize
908KB
-
Filesize
172KB
-
Filesize
800KB
-
Filesize
200KB
-
Filesize
24KB
-
Filesize
64KB
-
Filesize
244KB
-
Filesize
960KB
-
Filesize
2.1MB
-
Filesize
144KB
-
Filesize
5.7MB
-
Filesize
908KB