Analysis
-
max time kernel
118s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
17/04/2024, 14:59
General
-
Target
f609fac2e776801ad511145b54356e96_JaffaCakes118.exe
-
Size
254KB
-
MD5
f609fac2e776801ad511145b54356e96
-
SHA1
255b1873a482a2136f770315e0a6677fb4ca964c
-
SHA256
13aa7c9cfc3871877bc265ccce978315e6123664ad4124036c5bf5f411380963
-
SHA512
7f567148c413dd564e575d35d2de12bfc3aa1200c643888962dec4b6b3a2a77f80a25f1d9d335beeab669a4cd58fa96e0e68a0d045ed38c1e9b3240412531783
-
SSDEEP
6144:6u1CvnbFWARftk2mIDqH12hvHz+BWj622:6u1CPRLr5DqayWj622
Score
6/10
Malware Config
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry 3 TTPs 2 IoCs
Disk information is often read in order to detect sandboxing environments.
-
Drops file in Windows directory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f609fac2e776801ad511145b54356e96_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f609fac2e776801ad511145b54356e96_JaffaCakes118.exe"1⤵
- Maps connected drives based on registry
- Drops file in Windows directory
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
164KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
188KB
-
Filesize
164KB
-
Filesize
156KB
-
Filesize
164KB
-
Filesize
164KB
-
Filesize
164KB