Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    01-05-2024 20:18

General

  • Target

    0cc08f1337a21055109f341e3c7d9578_JaffaCakes118.exe

  • Size

    369KB

  • MD5

    0cc08f1337a21055109f341e3c7d9578

  • SHA1

    e7141af8e4ae501d0d6ffe4220d27a74acc1867a

  • SHA256

    180fdd8331e4fa545e2788ab914dad9b7986e7555e3e2359714c403f7261c866

  • SHA512

    04ed3bda6eb5035f7753c1a8cb0d4463a3918c7ea7662eb84152cf0099323cdc3468cf24e2a1a205b8cef1788e31b0565723da82722ad3e2465c346e48db0d0f

  • SSDEEP

    6144:17kzwblkqgzBmhFKQLZDhfYVxRnfyemXGjucHjKa406GmVvRABsXz7W9XUpK:5+wbcBm7ZdfYVugbJgX/RK

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\0cc08f1337a21055109f341e3c7d9578_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\0cc08f1337a21055109f341e3c7d9578_JaffaCakes118.exe"
    1⤵
    • Drops startup file
    • Loads dropped DLL
    PID:1732

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • \ProgramData\{27290a45-8acd-482b-2729-90a458ac2916}\0cc08f1337a21055109f341e3c7d9578_JaffaCakes118.exe

    Filesize

    369KB

    MD5

    0cc08f1337a21055109f341e3c7d9578

    SHA1

    e7141af8e4ae501d0d6ffe4220d27a74acc1867a

    SHA256

    180fdd8331e4fa545e2788ab914dad9b7986e7555e3e2359714c403f7261c866

    SHA512

    04ed3bda6eb5035f7753c1a8cb0d4463a3918c7ea7662eb84152cf0099323cdc3468cf24e2a1a205b8cef1788e31b0565723da82722ad3e2465c346e48db0d0f

  • memory/1732-19-0x0000000000680000-0x00000000006AC000-memory.dmp

    Filesize

    176KB

  • memory/1732-4-0x00000000001D0000-0x00000000001D1000-memory.dmp

    Filesize

    4KB

  • memory/1732-18-0x0000000000210000-0x0000000000212000-memory.dmp

    Filesize

    8KB

  • memory/1732-5-0x00000000001E0000-0x00000000001E1000-memory.dmp

    Filesize

    4KB

  • memory/1732-16-0x00000000006B0000-0x00000000006B1000-memory.dmp

    Filesize

    4KB

  • memory/1732-3-0x00000000001C0000-0x00000000001C1000-memory.dmp

    Filesize

    4KB

  • memory/1732-2-0x0000000000150000-0x0000000000151000-memory.dmp

    Filesize

    4KB

  • memory/1732-9-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/1732-17-0x00000000006C0000-0x00000000006C1000-memory.dmp

    Filesize

    4KB

  • memory/1732-26-0x0000000000730000-0x0000000000731000-memory.dmp

    Filesize

    4KB

  • memory/1732-25-0x0000000000740000-0x0000000000741000-memory.dmp

    Filesize

    4KB

  • memory/1732-15-0x0000000000670000-0x0000000000671000-memory.dmp

    Filesize

    4KB

  • memory/1732-23-0x00000000006D0000-0x00000000006D1000-memory.dmp

    Filesize

    4KB

  • memory/1732-0-0x0000000000020000-0x0000000000021000-memory.dmp

    Filesize

    4KB

  • memory/1732-6-0x00000000001F0000-0x00000000001F1000-memory.dmp

    Filesize

    4KB

  • memory/1732-7-0x0000000000200000-0x0000000000201000-memory.dmp

    Filesize

    4KB

  • memory/1732-24-0x0000000000720000-0x0000000000721000-memory.dmp

    Filesize

    4KB

  • memory/1732-14-0x0000000000660000-0x0000000000661000-memory.dmp

    Filesize

    4KB

  • memory/1732-13-0x0000000000650000-0x0000000000651000-memory.dmp

    Filesize

    4KB

  • memory/1732-12-0x0000000000640000-0x0000000000641000-memory.dmp

    Filesize

    4KB

  • memory/1732-11-0x0000000000630000-0x0000000000631000-memory.dmp

    Filesize

    4KB

  • memory/1732-10-0x0000000000620000-0x0000000000621000-memory.dmp

    Filesize

    4KB

  • memory/1732-8-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB

  • memory/1732-33-0x0000000000710000-0x0000000000711000-memory.dmp

    Filesize

    4KB

  • memory/1732-32-0x0000000000700000-0x0000000000701000-memory.dmp

    Filesize

    4KB

  • memory/1732-31-0x00000000006F0000-0x00000000006F1000-memory.dmp

    Filesize

    4KB

  • memory/1732-30-0x00000000006E0000-0x00000000006E1000-memory.dmp

    Filesize

    4KB

  • memory/1732-29-0x00000000007D0000-0x00000000007D1000-memory.dmp

    Filesize

    4KB

  • memory/1732-1-0x0000000000030000-0x0000000000032000-memory.dmp

    Filesize

    8KB