Analysis

  • max time kernel
    143s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-05-2024 20:18

General

  • Target

    0cc08f1337a21055109f341e3c7d9578_JaffaCakes118.exe

  • Size

    369KB

  • MD5

    0cc08f1337a21055109f341e3c7d9578

  • SHA1

    e7141af8e4ae501d0d6ffe4220d27a74acc1867a

  • SHA256

    180fdd8331e4fa545e2788ab914dad9b7986e7555e3e2359714c403f7261c866

  • SHA512

    04ed3bda6eb5035f7753c1a8cb0d4463a3918c7ea7662eb84152cf0099323cdc3468cf24e2a1a205b8cef1788e31b0565723da82722ad3e2465c346e48db0d0f

  • SSDEEP

    6144:17kzwblkqgzBmhFKQLZDhfYVxRnfyemXGjucHjKa406GmVvRABsXz7W9XUpK:5+wbcBm7ZdfYVugbJgX/RK

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\0cc08f1337a21055109f341e3c7d9578_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\0cc08f1337a21055109f341e3c7d9578_JaffaCakes118.exe"
    1⤵
    • Drops startup file
    PID:656
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=5104 --field-trial-handle=2284,i,15722001240173834669,15048020084704567542,262144 --variations-seed-version /prefetch:8
    1⤵
      PID:2232

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/656-0-0x0000000000740000-0x0000000000741000-memory.dmp

      Filesize

      4KB

    • memory/656-1-0x0000000000750000-0x0000000000752000-memory.dmp

      Filesize

      8KB

    • memory/656-2-0x0000000000760000-0x0000000000761000-memory.dmp

      Filesize

      4KB

    • memory/656-3-0x00000000007F0000-0x00000000007F1000-memory.dmp

      Filesize

      4KB

    • memory/656-13-0x0000000003430000-0x0000000003431000-memory.dmp

      Filesize

      4KB

    • memory/656-12-0x0000000003420000-0x0000000003421000-memory.dmp

      Filesize

      4KB

    • memory/656-16-0x0000000003490000-0x0000000003491000-memory.dmp

      Filesize

      4KB

    • memory/656-15-0x0000000003450000-0x0000000003451000-memory.dmp

      Filesize

      4KB

    • memory/656-14-0x0000000003440000-0x0000000003441000-memory.dmp

      Filesize

      4KB

    • memory/656-11-0x0000000003410000-0x0000000003411000-memory.dmp

      Filesize

      4KB

    • memory/656-10-0x0000000003400000-0x0000000003401000-memory.dmp

      Filesize

      4KB

    • memory/656-9-0x00000000033F0000-0x00000000033F1000-memory.dmp

      Filesize

      4KB

    • memory/656-8-0x00000000019A0000-0x00000000019A1000-memory.dmp

      Filesize

      4KB

    • memory/656-7-0x0000000001980000-0x0000000001981000-memory.dmp

      Filesize

      4KB

    • memory/656-6-0x0000000001970000-0x0000000001971000-memory.dmp

      Filesize

      4KB

    • memory/656-5-0x0000000000E00000-0x0000000000E01000-memory.dmp

      Filesize

      4KB

    • memory/656-4-0x0000000000DF0000-0x0000000000DF1000-memory.dmp

      Filesize

      4KB

    • memory/656-17-0x0000000001990000-0x0000000001992000-memory.dmp

      Filesize

      8KB

    • memory/656-18-0x00000000034A0000-0x00000000034A1000-memory.dmp

      Filesize

      4KB

    • memory/656-19-0x00000000034B0000-0x00000000034B1000-memory.dmp

      Filesize

      4KB

    • memory/656-21-0x00000000034D0000-0x00000000034D1000-memory.dmp

      Filesize

      4KB

    • memory/656-20-0x00000000034C0000-0x00000000034C1000-memory.dmp

      Filesize

      4KB

    • memory/656-22-0x00000000034E0000-0x00000000034E1000-memory.dmp

      Filesize

      4KB

    • memory/656-24-0x0000000003500000-0x0000000003501000-memory.dmp

      Filesize

      4KB

    • memory/656-23-0x00000000034F0000-0x00000000034F1000-memory.dmp

      Filesize

      4KB

    • memory/656-25-0x0000000003510000-0x0000000003511000-memory.dmp

      Filesize

      4KB

    • memory/656-26-0x0000000003460000-0x000000000348C000-memory.dmp

      Filesize

      176KB

    • memory/656-31-0x0000000003530000-0x0000000003531000-memory.dmp

      Filesize

      4KB

    • memory/656-30-0x0000000003520000-0x0000000003521000-memory.dmp

      Filesize

      4KB

    • memory/656-38-0x0000000005370000-0x0000000005371000-memory.dmp

      Filesize

      4KB