20cfbfa7ecb0ba984bb69724f86fc44c7b7287925c89ca34ba5cb6d2f419e381

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10-05-2024 08:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2e2fafd753352a320d7b91ec222355a4_JaffaCakes118.exe
Size

222KB
MD5

2e2fafd753352a320d7b91ec222355a4
SHA1

0302c617f90c2999a3ce0674722556fe4f3c4d43
SHA256

20cfbfa7ecb0ba984bb69724f86fc44c7b7287925c89ca34ba5cb6d2f419e381
SHA512

0425c7f148e5702e70f81a4257d7addfb4032cd42ada2c63a1256c98a4225416cb09aa4e7010ed86ed3d2144a91e3262d68db8401041d075e6c1f9bcfd41c923
SSDEEP

3072:RA0bra9bvMv4y+EBB8x1q0b3/sHNMNDd8gWzJD4+lDdPf+PMILRvllWV3rR:RFPa5cUtb3m2Dd8PDNll0MItWV3F

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\FoodPairings.job	2e2fafd753352a320d7b91ec222355a4_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\2e2fafd753352a320d7b91ec222355a4_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\2e2fafd753352a320d7b91ec222355a4_JaffaCakes118.exe"
1⤵
- Drops file in Windows directory
PID:1900

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1900-2-0x0000000000130000-0x0000000000131000-memory.dmp

Filesize
4KB

Download
memory/1900-1-0x0000000000030000-0x0000000000031000-memory.dmp

Filesize
4KB

Download
memory/1900-4-0x0000000000150000-0x0000000000170000-memory.dmp

Filesize
128KB

Download
memory/1900-3-0x0000000000140000-0x0000000000141000-memory.dmp

Filesize
4KB

Download
memory/1900-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/1900-5-0x0000000000190000-0x00000000001BF000-memory.dmp

Filesize
188KB

Download
memory/1900-9-0x0000000000150000-0x0000000000170000-memory.dmp

Filesize
128KB

Download
memory/1900-17-0x0000000000150000-0x0000000000170000-memory.dmp

Filesize
128KB

Download