Analysis
-
max time kernel
66s -
max time network
51s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
-
submitted
01-05-2024 00:58
General
-
Target
0ac5c4e7491eed83ef31007a9174e461_JaffaCakes118.exe
-
Size
2.0MB
-
MD5
0ac5c4e7491eed83ef31007a9174e461
-
SHA1
d42d54b957ed1443a98c14d4de914dfb6d182844
-
SHA256
dbc760cde04e9cc9aff775f54170ae9e9646dbe06457e2ae29b557d40cbb0bd3
-
SHA512
c8f54916750706a87d2ef7faabd26b74760f4d831cb186f48e8969b56419a5dea09dcd7b4e36b0426f4a4f44616cf15bdfe6fe0d56c2a95503b82310215999b5
-
SSDEEP
49152:SykF9Lh7inyQL/kYpa6s7zJiBSFCNSw2rdupHmaq5lLnjJTo3Wu6KjQ:SlL8DrZpcYBTNSqEaq5ToImQ
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Drops desktop.ini file(s) 2 IoCs
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Drops file in Windows directory 3 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0ac5c4e7491eed83ef31007a9174e461_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0ac5c4e7491eed83ef31007a9174e461_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- Drops desktop.ini file(s)
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4.0MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4.0MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4.0MB
-
Filesize
5.7MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4.0MB
-
Filesize
5.7MB