Analysis

  • max time kernel
    134s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    09/05/2024, 01:09

General

  • Target

    279413ed7e64108ace0708a7e4f232c7_JaffaCakes118.exe

  • Size

    510KB

  • MD5

    279413ed7e64108ace0708a7e4f232c7

  • SHA1

    4d172016afac058b2c5b9bc1cd0384a48e15a49b

  • SHA256

    392b1c69b1af9da6c32d86d49e8a0d3e6bd0d6ed1ff97284541fe5cefc838ae9

  • SHA512

    a6d961786675262e5975cef92ef0a911e40005383a77bf5e1c08369f90942a89c0c80aee058dfdd34261ed46c3bcc87762e53dc5c0be208139ad1be69519bb74

  • SSDEEP

    6144:0ZBuNpUyd0ijcUtdWuOJT2H3FTpYAGPBf24FFfAE20iOzhGwkYky80JIxOd8:0ZSayd0ipruR8qjP1FFFOOzhEYk5S8

Score
6/10

Malware Config

Signatures

  • Enumerates connected drives 3 TTPs 21 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\279413ed7e64108ace0708a7e4f232c7_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\279413ed7e64108ace0708a7e4f232c7_JaffaCakes118.exe"
    1⤵
    • Enumerates connected drives
    • Writes to the Master Boot Record (MBR)
    PID:2284

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2284-0-0x0000000000400000-0x0000000000485000-memory.dmp

          Filesize

          532KB