Analysis
- max time kernel
66s - max time network
51s - platform
windows10-2004_x64 - resource
win10v2004-20240419-en - resource tags
- submitted
01/05/2024, 00:58
General
- Target 0ac5c4e7491eed83ef31007a9174e461_JaffaCakes118.exe
- Size 2.0MB
- Sample240501-bbrfmadg76
- SHA256 dbc760cde04e9cc9aff775f54170ae9e9646dbe06457e2ae29b557d40cbb0bd3
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 1 IoCs
- Drops desktop.ini file(s) 2 IoCs
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
- Drops file in Windows directory 3 IoCs
- Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0ac5c4e7491eed83ef31007a9174e461_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0ac5c4e7491eed83ef31007a9174e461_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- Drops desktop.ini file(s)
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3412-0-0x0000000000850000-0x0000000000851000-memory.dmp
memory/3412-1-0x00000000008B0000-0x00000000008B1000-memory.dmp
memory/3412-9-0x0000000000400000-0x00000000007F6000-memory.dmp
memory/3412-8-0x0000000002700000-0x0000000002701000-memory.dmp
memory/3412-7-0x00000000026F0000-0x00000000026F1000-memory.dmp
memory/3412-6-0x0000000000400000-0x00000000007F6000-memory.dmp
memory/3412-5-0x00000000025C0000-0x00000000025C1000-memory.dmp
memory/3412-4-0x00000000025B0000-0x00000000025B1000-memory.dmp
memory/3412-3-0x00000000025A0000-0x00000000025A1000-memory.dmp
memory/3412-2-0x00000000008C0000-0x00000000008C1000-memory.dmp
memory/3412-13-0x0000000002750000-0x0000000002760000-memory.dmp
memory/3412-14-0x00000000750B0000-0x0000000075661000-memory.dmp
memory/3412-12-0x00000000750B0000-0x0000000075661000-memory.dmp
memory/3412-17-0x0000000002750000-0x0000000002760000-memory.dmp
memory/3412-18-0x0000000002750000-0x0000000002760000-memory.dmp
memory/3412-20-0x0000000002750000-0x0000000002760000-memory.dmp
memory/3412-21-0x0000000000400000-0x00000000007F6000-memory.dmp
memory/3412-22-0x00000000750B0000-0x0000000075661000-memory.dmp
memory/3412-23-0x0000000002750000-0x0000000002760000-memory.dmp
memory/3412-24-0x0000000002750000-0x0000000002760000-memory.dmp
memory/3412-25-0x0000000002750000-0x0000000002760000-memory.dmp
memory/3412-27-0x0000000000400000-0x00000000007F6000-memory.dmp
memory/3412-28-0x00000000750B0000-0x0000000075661000-memory.dmp