Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
18/04/2024, 03:39
General
-
Target
f72e9a81cc6707eaf95212169a317ea9_JaffaCakes118.exe
-
Size
238KB
-
MD5
f72e9a81cc6707eaf95212169a317ea9
-
SHA1
8b609e64273f6d8399856c28b1ddc743df2c6b1d
-
SHA256
2b8704a02f347e94681a291449ad32552706e4c3c16ac127236f16dac1a14d4d
-
SHA512
554de4aabbf4aabf55c72602107c2f045a5c31cd746bbe98cd3dcb324c54f6d6b8d33676882110d47241f851852c3962eb2e3bfce1c9227fcc15c863f7904e30
-
SSDEEP
6144:t9Q2nTMNJFipgHMl898gWNlPTGQQm6agrdtG61h7:ti2YjF2NtTirdtGsh7
Score
8/10
Malware Config
Signatures
-
Looks for VMWare Tools registry key 2 TTPs 1 IoCs
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f72e9a81cc6707eaf95212169a317ea9_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f72e9a81cc6707eaf95212169a317ea9_JaffaCakes118.exe"1⤵
- Looks for VMWare Tools registry key
- Writes to the Master Boot Record (MBR)
- Drops file in System32 directory
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
268KB
-
Filesize
692KB
-
Filesize
12KB
-
Filesize
48KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
692KB
-
Filesize
268KB