Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20240412-en - resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system - submitted
20/04/2024, 07:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
fc3e193cbd0cdabc2b8f98e5b3cb8515_JaffaCakes118.exe
Resource
win7-20240221-en
2 signatures
150 seconds
General
- Target fc3e193cbd0cdabc2b8f98e5b3cb8515_JaffaCakes118.exe
- Size 148KB
- Sample240420-jbbdeacc3z
- SHA256 194020fcc036abf441fe1da5bce8433af9418f0251889f8deb9a3436fb9398d1
- MD5 fc3e193cbd0cdabc2b8f98e5b3cb8515
- SHA1 0819c999495d8dfce6e77a4e72288c1eb9ebb3f7
- SHA512 483a502dc01373d2c5e163602263f7c1f71d0651743b6862873491ff3a8f398959443d36bbb334e655de63823be373590fcac14a93abd94132d3675eb75b1094
- SSDEEP 3072:4DrubzdTZdpD209bNRq8pbBuXhUGkKq2hbOTMwCnDJakgJOg3Xe7F:4mbzDXBbe8pbBuelIhaTMdrKOg3+F
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Mark of the Web detected: This indicates that the page was originally saved or cloned. 1 IoCs
flow ioc 14 https://jira.ops.aol.com/secure/attachment/688199/failwhale.html - Drops file in Windows directory 1 IoCs
description ioc Process File created C:\WINDOWS\inf\lsass.exe fc3e193cbd0cdabc2b8f98e5b3cb8515_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Windows\INF\lsass.exe
- Size 491KB
- SHA256 c24692e48acc991599cec9557443e4013312199c272ae44ec87877a5d90cc9dc
- MD5 49b7e83747f11d134a4aa3a23064eb3b
- SHA1 44a9d0e0a9edd7b9d963b57557be1fc04dab1698
- SHA512 bf923406b772d182e27047018db69e9f6cee03d0e04ef164a3f430d28cfd1cdd5c242c86eec1a673bb4216ccd96776f4b3cc9ea71be5dc02da79b2ea842ded7f
- SSDEEP 12288:VcbughX8P61hL0vs13QocuVtQSzuRmP5/YFV:KX8P4hL0vs13QovVtQSzuRmPZYFV
- MD5 SHA1 SHA512 SSDEEP