Analysis

  • max time kernel
    121s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15-04-2024 19:13

General

  • Target

    f1b8c159476cef41d3e6b5e536a66a8f_JaffaCakes118.exe

  • Size

    2.6MB

  • MD5

    f1b8c159476cef41d3e6b5e536a66a8f

  • SHA1

    fc9e60530121002ee970599bef9c42bcf1bdcba3

  • SHA256

    26ba255e135c27ccd4304fe0a1ddc917163f02f39f830399a3e86eb22ed2c34a

  • SHA512

    f3b73f6205f9c7dab34a6d7edb41a8b5d31d6b34d26f46199516c66dd9c481c5f6327b1e51ac7c7aabb13367e2c52b855e45a9a2ec3656252c70f1b2d88a87e9

  • SSDEEP

    49152:ZXjsGvw6pqlzDAsKMZN8GO2Q1VjPnUnygwdzfF8pPKRW/BRSbUV:Zjs2wy+zDAsKMg7Lb7gwh2VKkiUV

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f1b8c159476cef41d3e6b5e536a66a8f_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\f1b8c159476cef41d3e6b5e536a66a8f_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2236

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads