Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/04/2024, 18:11

General

  • Target

    ffdd4aeefb9328df176eff2863727432_JaffaCakes118.exe

  • Size

    2.5MB

  • MD5

    ffdd4aeefb9328df176eff2863727432

  • SHA1

    4f3c4131b33ac4a91683edad0bacd8cd6be1de45

  • SHA256

    6b3d2e5738ff9d2f7d929548385ab79ca8297817bed06de0505eb0e89f06a4a5

  • SHA512

    7caac6bc2dbfdf9da488d4f45baafa59e51712a7d856f1c73b8b047849aa60218c9ae9c9e822a1f6decc1ac0fb301c9912d45b51689fa4f4fcbc87172c94b92d

  • SSDEEP

    24576:6b0+93II/XTuwUerkppxSnvb0mWw+SVy/Eri98Dl5SCD/C78L74vwHcVTH8R304m:w0+93HXlTffyJmj9D/DL77HccR30i1

Score
6/10

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\ffdd4aeefb9328df176eff2863727432_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\ffdd4aeefb9328df176eff2863727432_JaffaCakes118.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:4556

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4556-0-0x00000000026A0000-0x00000000026A1000-memory.dmp

    Filesize

    4KB

  • memory/4556-2-0x0000000000400000-0x00000000006E8000-memory.dmp

    Filesize

    2.9MB

  • memory/4556-4-0x00000000026A0000-0x00000000026A1000-memory.dmp

    Filesize

    4KB