Analysis
-
max time kernel
142s -
max time network
103s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
-
submitted
03-05-2024 13:45
General
-
Target
10aad0297bfcd915ca954fcbb2c3b32c_JaffaCakes118.exe
-
Size
492KB
-
MD5
10aad0297bfcd915ca954fcbb2c3b32c
-
SHA1
5670f76213fe0f64451771593b37520a9225dbe0
-
SHA256
60fdba6932c96b8acb151a557ebab50886be643d5ffdf991c87771fa040d1bfb
-
SHA512
a74ec25c75c7ec6ee2372ec4203853a375f8806c013729d4f9ab0aa7ace23fe3362a75c5b8a193c00fb40d2bf42223baa16167f6263260dbcef5df40d3547ed3
-
SSDEEP
12288:1/Tp0ZZOtb4VkYUBk7ODwiV6ng6rXW9os+AiyBp:1dg4tb2U2OwiV6geXWesnn
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: SetClipboardViewer 1 IoCs
-
Suspicious use of FindShellTrayWindow 8 IoCs
-
Suspicious use of SendNotifyMessage 8 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\10aad0297bfcd915ca954fcbb2c3b32c_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\10aad0297bfcd915ca954fcbb2c3b32c_JaffaCakes118.exe"1⤵
- Suspicious behavior: SetClipboardViewer
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
20KB
MD5a962505a8cbdb9ec6bf3fab6a7e1c38c
SHA1cd0d66b5aea2887bdbc3d0a623ef0ddfd11e5b9f
SHA256e669384098fd7ec8e003e7f3fb8275090db9d3ed11614f1b98c994920994577e
SHA5123c564eab63e9e06138266a8fd01af100acd337d9a442a67aa00a8fd456ee07a333bb7b556a45439bea53f7d3ca2c79b1e71ecb217145b67f0acc408623146dc0
-
Filesize
5KB
MD5538363ec666ad85f44b6f2fd6b1d8bb1
SHA1638ecd24f00704fc01dec5d7ba33ee48b0a6953f
SHA2566b331733fb70ffb4db2ebd3605a2c5f8227c7545bf9833c7d8966a031d58b741
SHA5123e8a8dcc871dbcdc1c1f1b00f9b32008d760124153bcc2742849a01ecbb7c82eb9bbcc38b27d9e64e1b32008cd713f191a74672028f72c729028f1bc997c543e
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
1.6MB
-
Filesize
4KB
-
Filesize
4KB