Analysis
-
max time kernel
141s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
-
submitted
28/04/2024, 08:10
General
-
Target
04bf27efa12eecdd964f7f3b55de67a0_JaffaCakes118.exe
-
Size
3.6MB
-
MD5
04bf27efa12eecdd964f7f3b55de67a0
-
SHA1
4a9ba01009b8db2c4168b96d65aadf6a23872eb9
-
SHA256
e2e9c429daa3c6be0e6445231550961eaa865d4493ef36cdb0faf2c7fa9eb0ba
-
SHA512
ef9fe02a0ca250407d02f5d750d4aeed5c51732093cf6300609e537e8c561c39a032531e8ad42aee5b1fac59fa67864dd97de3c9e7931718c2c43d9b98dfc64d
-
SSDEEP
49152:FT40xGX60hASVUgxYx7/hhSrf6VH58mNT2RoTjn7:160/x7/hhSrj
Score
6/10
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\04bf27efa12eecdd964f7f3b55de67a0_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\04bf27efa12eecdd964f7f3b55de67a0_JaffaCakes118.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
3.6MB
-
Filesize
3.6MB
-
Filesize
4KB
-
Filesize
3.6MB
-
Filesize
4KB
-
Filesize
3.6MB