Analysis

  • max time kernel
    147s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/05/2024, 01:04

General

  • Target

    278f586ac8d721b3657ae3aeb7f95ab4_JaffaCakes118.exe

  • Size

    1.6MB

  • MD5

    278f586ac8d721b3657ae3aeb7f95ab4

  • SHA1

    328bbe0bb0b6f323c51f3d8a89a9ce7e17a26b68

  • SHA256

    82b3e4bc02d224733f11f264c3c247881707e20fea0692a0ea0390698f42ceb7

  • SHA512

    5196ac8c41b2d7f2f0caeb3c1b65599ee5b0948408b4ce3f4850508c926947de2273e6f2c7e70d9534fd9ee8c482966beb97dd6ccb49d12b79fd918f54a184b7

  • SSDEEP

    24576:inCvBLGJqOr9DR8Ml3nLvPB/UM7MWpF84pMjQ8wOe7dBYyD:uC5Ar9SMxPB/UMXp6jQ8wOcdBYc

Score
6/10

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

  • Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\278f586ac8d721b3657ae3aeb7f95ab4_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\278f586ac8d721b3657ae3aeb7f95ab4_JaffaCakes118.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    • Suspicious behavior: EnumeratesProcesses
    PID:1392

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads