06d7de3d030893de68847607a6bc78c25c297b8939ca03d3512cf28f692f84fd

Analysis

max time kernel
117s
max time network
117s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
08/05/2024, 16:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

25a4eff801e47e7d0a888700563a3ce9_JaffaCakes118.exe
Size

306KB
MD5

25a4eff801e47e7d0a888700563a3ce9
SHA1

1066722fdfd4f0ba0a9a231c223b16be5767fe71
SHA256

06d7de3d030893de68847607a6bc78c25c297b8939ca03d3512cf28f692f84fd
SHA512

483f158ba16f864d6d9fcf1202e04317918d94298387a0079dc8cceb416797e8591f8ac46df41eada6ea3851c7eb6d92d38c6877ebe1f110ed7d22255f2154c1
SSDEEP

6144:wQJ/TPvOEjYBpI778yBgmTAnDXWbB5MMdI:TPMBpI7IMhG4B5MMdI

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\ChalkOut.job	25a4eff801e47e7d0a888700563a3ce9_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\25a4eff801e47e7d0a888700563a3ce9_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\25a4eff801e47e7d0a888700563a3ce9_JaffaCakes118.exe"
1⤵
- Drops file in Windows directory
PID:2240

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2240-1-0x0000000000030000-0x0000000000031000-memory.dmp

Filesize
4KB

Download
memory/2240-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/2240-2-0x00000000000F0000-0x00000000000F1000-memory.dmp

Filesize
4KB

Download
memory/2240-3-0x0000000000110000-0x0000000000130000-memory.dmp

Filesize
128KB

Download
memory/2240-4-0x0000000000100000-0x0000000000101000-memory.dmp

Filesize
4KB

Download
memory/2240-9-0x0000000000110000-0x0000000000130000-memory.dmp

Filesize
128KB

Download
memory/2240-5-0x00000000001B0000-0x00000000001DF000-memory.dmp

Filesize
188KB

Download
memory/2240-17-0x0000000000110000-0x0000000000130000-memory.dmp

Filesize
128KB

Download