Analysis

  • max time kernel
    93s
  • max time network
    139s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/04/2024, 12:00

General

  • Target

    09bb0be45d3a4e16d2914d76646c29ae_JaffaCakes118.exe

  • Size

    298KB

  • MD5

    09bb0be45d3a4e16d2914d76646c29ae

  • SHA1

    f1ff64636ad32c7b99176e9bbabc148d58f9dc35

  • SHA256

    10dca6fc717af5b2386f8c80f1bc334b40f0c87e64040a4993e70b0758fb2ba2

  • SHA512

    47306fdb82ba8e139a8dd7fe3a3fb00d4c558ba8512057a9099f3a115737b8bc93657d250f00ace7252fe6840a02699e88bb3b373080e71bd55517621e9cacf4

  • SSDEEP

    6144:B0hMZ8tEuIudjZDb8bX6uBoM7lbagCu6AG1ZdbzjLNUlH:ChKfUjZDuXaMl+gCu65zPNUlH

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Drops file in Windows directory 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\09bb0be45d3a4e16d2914d76646c29ae_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\09bb0be45d3a4e16d2914d76646c29ae_JaffaCakes118.exe"
    1⤵
    • Drops startup file
    • Drops file in Windows directory
    PID:2160

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2160-4-0x0000000000B30000-0x0000000000B31000-memory.dmp

          Filesize

          4KB

        • memory/2160-3-0x0000000000B20000-0x0000000000B21000-memory.dmp

          Filesize

          4KB

        • memory/2160-2-0x0000000000B10000-0x0000000000B11000-memory.dmp

          Filesize

          4KB

        • memory/2160-1-0x0000000000AB0000-0x0000000000AB1000-memory.dmp

          Filesize

          4KB

        • memory/2160-0-0x00000000002F0000-0x00000000002F1000-memory.dmp

          Filesize

          4KB

        • memory/2160-5-0x0000000000B40000-0x0000000000B41000-memory.dmp

          Filesize

          4KB

        • memory/2160-6-0x0000000000B50000-0x0000000000B51000-memory.dmp

          Filesize

          4KB

        • memory/2160-10-0x00000000033E0000-0x00000000033E1000-memory.dmp

          Filesize

          4KB

        • memory/2160-11-0x00000000033F0000-0x00000000033F1000-memory.dmp

          Filesize

          4KB

        • memory/2160-19-0x0000000003BD0000-0x0000000003BD1000-memory.dmp

          Filesize

          4KB

        • memory/2160-18-0x0000000003880000-0x0000000003881000-memory.dmp

          Filesize

          4KB

        • memory/2160-17-0x0000000003870000-0x0000000003871000-memory.dmp

          Filesize

          4KB

        • memory/2160-16-0x0000000003860000-0x0000000003861000-memory.dmp

          Filesize

          4KB

        • memory/2160-15-0x0000000003850000-0x0000000003851000-memory.dmp

          Filesize

          4KB

        • memory/2160-14-0x0000000003840000-0x0000000003841000-memory.dmp

          Filesize

          4KB

        • memory/2160-13-0x0000000003830000-0x0000000003831000-memory.dmp

          Filesize

          4KB

        • memory/2160-12-0x0000000003820000-0x0000000003821000-memory.dmp

          Filesize

          4KB

        • memory/2160-9-0x0000000000C50000-0x0000000000C51000-memory.dmp

          Filesize

          4KB

        • memory/2160-8-0x0000000000C40000-0x0000000000C41000-memory.dmp

          Filesize

          4KB

        • memory/2160-7-0x0000000000BE0000-0x0000000000BE1000-memory.dmp

          Filesize

          4KB

        • memory/2160-20-0x0000000003BE0000-0x0000000003BE1000-memory.dmp

          Filesize

          4KB

        • memory/2160-23-0x0000000004430000-0x0000000004431000-memory.dmp

          Filesize

          4KB

        • memory/2160-22-0x0000000003C10000-0x0000000003C11000-memory.dmp

          Filesize

          4KB

        • memory/2160-21-0x0000000003C00000-0x0000000003C01000-memory.dmp

          Filesize

          4KB

        • memory/2160-27-0x0000000004450000-0x000000000447F000-memory.dmp

          Filesize

          188KB

        • memory/2160-26-0x0000000004CD0000-0x0000000004CD1000-memory.dmp

          Filesize

          4KB

        • memory/2160-31-0x0000000005120000-0x0000000005121000-memory.dmp

          Filesize

          4KB

        • memory/2160-25-0x0000000004480000-0x0000000004481000-memory.dmp

          Filesize

          4KB

        • memory/2160-24-0x0000000004440000-0x0000000004441000-memory.dmp

          Filesize

          4KB

        • memory/2160-32-0x0000000005570000-0x0000000005571000-memory.dmp

          Filesize

          4KB