Analysis

  • max time kernel
    68s
  • max time network
    50s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/04/2024, 13:28

General

  • Target

    00ded89e01e5485b62fdcba45e18ffde_JaffaCakes118.jad

  • Size

    1.4MB

  • MD5

    00ded89e01e5485b62fdcba45e18ffde

  • SHA1

    3c1594b7a61b7e22c78deae1cd279f4464f7ba8e

  • SHA256

    337ad1cc414156eafefcd8c924c39ec06184acae87798ed0b11ce310022dfab9

  • SHA512

    78b9ec825a01c7f6feb22b85fc1adcf38d27a88919e2a75f145fa048330e85e8ec10afa31bf8463d3774147ac818d587b62e346cf4d2e3973d25c0aa5137115a

  • SSDEEP

    24576:K0p6PfcBN/Si6H3sy+RG+IH0+FYiCPGlFoL35TVYgNpl1ypqPPmu2zBi7dFgkwWN:5kncBtSjXuG+0eGry5xNlypqPcNiTdxN

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\00ded89e01e5485b62fdcba45e18ffde_JaffaCakes118.jad
    1⤵
    • Modifies registry class
    PID:4084
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:4600

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads