Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
25/04/2024, 21:54
General
-
Target
0027cace809a50cd85cea40e908577da_JaffaCakes118.exe
-
Size
578KB
-
MD5
0027cace809a50cd85cea40e908577da
-
SHA1
c3bf0fe553a4e52a973b6a0cc9f2f5425c6fa4c6
-
SHA256
113f64711175682cf9bdf85b10c2183c38bdb5d763222780ccb002abadc53c75
-
SHA512
e7782ae6d6994436623ee0a923a6670ba8ae7bf38043a38fcb2f00f932134075a79e36c68cd583aecbd9677beccc2c9554d73f4693ccb1111710fbc9c7649cfa
-
SSDEEP
12288:0PkZnNZwi3ZlYq/jVIO00rY/qMdb4GtcZy7HyLXz3v/Os3eSPclCR0B:2KN+qlYKjVz00rYiMd8z3vmsuSPc0R0B
Score
7/10
Malware Config
Signatures
-
Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry 3 TTPs 2 IoCs
Disk information is often read in order to detect sandboxing environments.
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious use of SetWindowsHookEx 14 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0027cace809a50cd85cea40e908577da_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0027cace809a50cd85cea40e908577da_JaffaCakes118.exe"1⤵
- Checks BIOS information in registry
- Maps connected drives based on registry
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB