Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
-
submitted
26/04/2024, 20:08
General
-
Target
0190a511394be64f95d442c4c20571fa_JaffaCakes118.exe
-
Size
254KB
-
MD5
0190a511394be64f95d442c4c20571fa
-
SHA1
1ad976cae0d2658463ba795b3b66d87f8f85f4d9
-
SHA256
20112c5497a4a7b41cf439654ecb1a36df420fdd2e2e0c64bbf4772fc67a33f6
-
SHA512
f84c593482cf216f0d50861c01e89e5936c9e903b6aaad95b82e9b21824052804b418345e563b9ec21937b85dcc9bc114e4c868e84d77a0d69b2c7797fb6a682
-
SSDEEP
3072:HnykbXFcrkGhmrA0KQ+s1aMnrj365s8zGqm0TP7zJNNTEtfAiXpiZdngEyDMxjc:HtbXuiqszK5fG61NN+fDiTgBgxw
Score
6/10
Malware Config
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry 3 TTPs 2 IoCs
Disk information is often read in order to detect sandboxing environments.
-
Drops file in Windows directory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0190a511394be64f95d442c4c20571fa_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0190a511394be64f95d442c4c20571fa_JaffaCakes118.exe"1⤵
- Maps connected drives based on registry
- Drops file in Windows directory
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
164KB
-
Filesize
4KB
-
Filesize
164KB
-
Filesize
188KB
-
Filesize
164KB
-
Filesize
156KB
-
Filesize
164KB
-
Filesize
164KB