2025b2a7741373c65f2c31eaf0a6a8868a5898565ad4b725553181f4e998bcee

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
07/05/2024, 00:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1ec629f37d5c84c951603fa86bca84c7_JaffaCakes118.exe
Size

315KB
MD5

1ec629f37d5c84c951603fa86bca84c7
SHA1

ce2983b0f96b9a6fca5c6d2923e2892b59a8cd55
SHA256

2025b2a7741373c65f2c31eaf0a6a8868a5898565ad4b725553181f4e998bcee
SHA512

12ae11fcca8dde2831fbfaa029a980a1ff396672d3b3f0a661db748baab2e30cccd7049508e9387a8c23c3f6ab6080ed803478291dcfd725de285e4da37fd2a3
SSDEEP

6144:gXnOFiFUl281uB5KtG3Tk6dHvdJOLBMiM3/X5eq3:gXnOuU+B5uG3dPdJmM5/X5eq3

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\ExpertLingo.job	1ec629f37d5c84c951603fa86bca84c7_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\1ec629f37d5c84c951603fa86bca84c7_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\1ec629f37d5c84c951603fa86bca84c7_JaffaCakes118.exe"
1⤵
- Drops file in Windows directory
PID:2944

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2944-1-0x0000000000030000-0x0000000000031000-memory.dmp

Filesize
4KB

Download
memory/2944-3-0x0000000000100000-0x0000000000101000-memory.dmp

Filesize
4KB

Download
memory/2944-2-0x00000000000F0000-0x00000000000F1000-memory.dmp

Filesize
4KB

Download
memory/2944-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/2944-4-0x0000000000110000-0x0000000000130000-memory.dmp

Filesize
128KB

Download
memory/2944-5-0x0000000000150000-0x000000000017F000-memory.dmp

Filesize
188KB

Download
memory/2944-9-0x0000000000110000-0x0000000000130000-memory.dmp

Filesize
128KB

Download
memory/2944-17-0x0000000000110000-0x0000000000130000-memory.dmp

Filesize
128KB

Download