14efce6939d70efca9fe2568723e9ece3d00265268b866b19d0a8ffbc8e10598

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
08/05/2024, 01:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

2282a5061d46e68f0aa130c61d4dc906_JaffaCakes118.exe
Size

209KB
MD5

2282a5061d46e68f0aa130c61d4dc906
SHA1

4edc984519b323a19ae2fb87a2406e0ff07765e6
SHA256

14efce6939d70efca9fe2568723e9ece3d00265268b866b19d0a8ffbc8e10598
SHA512

1d56bd2b1b705b692fa99e93813a70187a418a85513a5b85a4a41baa190986d030178a0bfb70f20a3056d164f0627af6a39e36491d9df833ccf0329daa29d54b
SSDEEP

3072:1dBTf+QvepTLWPZBeJWjbPYQ/zwa7Pu2CXexA6M/mDXLWVUbsWsEZ0:hjQq3eifzBW6A6kWXLW2bsWPZ0

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\LightningDisk.job	2282a5061d46e68f0aa130c61d4dc906_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\2282a5061d46e68f0aa130c61d4dc906_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\2282a5061d46e68f0aa130c61d4dc906_JaffaCakes118.exe"
1⤵
- Drops file in Windows directory
PID:2676

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2676-0-0x0000000000250000-0x0000000000290000-memory.dmp

Filesize
256KB

Download
memory/2676-1-0x0000000000960000-0x00000000009A0000-memory.dmp

Filesize
256KB

Download
memory/2676-2-0x0000000000AA0000-0x0000000000AE0000-memory.dmp

Filesize
256KB

Download
memory/2676-4-0x0000000000080000-0x00000000000AF000-memory.dmp

Filesize
188KB

Download