Analysis

  • max time kernel
    133s
  • max time network
    123s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/05/2024, 03:40

General

  • Target

    15d0cb25a2f4faeed1f96443084218e7_JaffaCakes118.exe

  • Size

    378KB

  • MD5

    15d0cb25a2f4faeed1f96443084218e7

  • SHA1

    08fa9098945a284e12f3ca8728ffbe47919c8482

  • SHA256

    c88487566df306842f5da4e40186d1ccb9ec3214cd180899f81a715979bb51b7

  • SHA512

    2122c0a4e4f530c13c88e3965a5e533462b705dbd1830713aa3df9f8da102526cf42e6deb83301dca9f8c18346c613bff1e9fcd563f02cd2732af7c82a7e726b

  • SSDEEP

    6144:YGIVA0/LPcaxXl2saQnZBKPNmOd98pmVENZw7AU1nJdaKKlPTZ:jIVFEaxtyPNmOsKKlPTZ

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Drops file in Windows directory 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\15d0cb25a2f4faeed1f96443084218e7_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\15d0cb25a2f4faeed1f96443084218e7_JaffaCakes118.exe"
    1⤵
    • Drops startup file
    • Drops file in Windows directory
    PID:1316

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1316-1-0x00000000001E0000-0x00000000001E1000-memory.dmp

    Filesize

    4KB

  • memory/1316-0-0x0000000000150000-0x0000000000151000-memory.dmp

    Filesize

    4KB

  • memory/1316-16-0x0000000003220000-0x0000000003221000-memory.dmp

    Filesize

    4KB

  • memory/1316-15-0x00000000031F0000-0x00000000031F1000-memory.dmp

    Filesize

    4KB

  • memory/1316-14-0x0000000003210000-0x0000000003211000-memory.dmp

    Filesize

    4KB

  • memory/1316-13-0x00000000031E0000-0x00000000031E1000-memory.dmp

    Filesize

    4KB

  • memory/1316-12-0x0000000002E90000-0x0000000002E91000-memory.dmp

    Filesize

    4KB

  • memory/1316-11-0x0000000002E80000-0x0000000002E81000-memory.dmp

    Filesize

    4KB

  • memory/1316-10-0x0000000001430000-0x0000000001431000-memory.dmp

    Filesize

    4KB

  • memory/1316-9-0x0000000001420000-0x0000000001421000-memory.dmp

    Filesize

    4KB

  • memory/1316-8-0x0000000001410000-0x0000000001411000-memory.dmp

    Filesize

    4KB

  • memory/1316-7-0x0000000000940000-0x0000000000941000-memory.dmp

    Filesize

    4KB

  • memory/1316-6-0x0000000000930000-0x0000000000931000-memory.dmp

    Filesize

    4KB

  • memory/1316-5-0x0000000000920000-0x0000000000921000-memory.dmp

    Filesize

    4KB

  • memory/1316-4-0x0000000000910000-0x0000000000911000-memory.dmp

    Filesize

    4KB

  • memory/1316-3-0x0000000000900000-0x0000000000901000-memory.dmp

    Filesize

    4KB

  • memory/1316-2-0x00000000008F0000-0x00000000008F1000-memory.dmp

    Filesize

    4KB

  • memory/1316-18-0x0000000003240000-0x0000000003241000-memory.dmp

    Filesize

    4KB

  • memory/1316-19-0x0000000003280000-0x0000000003281000-memory.dmp

    Filesize

    4KB

  • memory/1316-17-0x0000000003230000-0x0000000003231000-memory.dmp

    Filesize

    4KB

  • memory/1316-26-0x0000000003F30000-0x0000000003F31000-memory.dmp

    Filesize

    4KB

  • memory/1316-25-0x0000000003F00000-0x0000000003F01000-memory.dmp

    Filesize

    4KB

  • memory/1316-24-0x0000000003AD0000-0x0000000003AD1000-memory.dmp

    Filesize

    4KB

  • memory/1316-20-0x0000000003250000-0x000000000327F000-memory.dmp

    Filesize

    188KB

  • memory/1316-34-0x0000000002D70000-0x0000000002D71000-memory.dmp

    Filesize

    4KB