Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    30/04/2024, 02:56

General

  • Target

    08dd86c52a7b78053178b65b6da94bcd_JaffaCakes118.exe

  • Size

    335KB

  • MD5

    08dd86c52a7b78053178b65b6da94bcd

  • SHA1

    33d5a4aef4154e68770823746de7d9f39e9d0b38

  • SHA256

    258ecd750b2be2e3e985d45f24aa2a4fbf8c5d43d380a7f9af4c6a4dced70596

  • SHA512

    0e468c24d25abbc6b717939b6f6a7e4b84a300b161665947c359b5a4a3ed44295047461ab88eafdb3ae26abb7d13135588ef0240afd8f1f81e9fe369b8312cda

  • SSDEEP

    6144:OuyFB0Z2QAhEHXicjMi373gLQ85khsCcTiAkwi:Ouo2ZQyicjMGwE6kuTiAkwi

Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\08dd86c52a7b78053178b65b6da94bcd_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\08dd86c52a7b78053178b65b6da94bcd_JaffaCakes118.exe"
    1⤵
    • Drops file in Windows directory
    PID:2252

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2252-0-0x0000000000020000-0x0000000000021000-memory.dmp

          Filesize

          4KB

        • memory/2252-1-0x0000000000030000-0x0000000000031000-memory.dmp

          Filesize

          4KB

        • memory/2252-2-0x0000000000130000-0x0000000000131000-memory.dmp

          Filesize

          4KB

        • memory/2252-5-0x0000000000160000-0x0000000000161000-memory.dmp

          Filesize

          4KB

        • memory/2252-4-0x0000000000150000-0x0000000000151000-memory.dmp

          Filesize

          4KB

        • memory/2252-3-0x0000000000140000-0x0000000000141000-memory.dmp

          Filesize

          4KB

        • memory/2252-6-0x0000000000170000-0x00000000001A1000-memory.dmp

          Filesize

          196KB

        • memory/2252-11-0x0000000000170000-0x00000000001A1000-memory.dmp

          Filesize

          196KB

        • memory/2252-8-0x00000000002D0000-0x00000000002FF000-memory.dmp

          Filesize

          188KB

        • memory/2252-18-0x0000000000170000-0x00000000001A1000-memory.dmp

          Filesize

          196KB