70d9f426fca628fca9a34c102f663f2ec23c1afde4c0d5f828c6f52fe8cc5b14

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
11/05/2024, 14:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

352609687804f78238dc53e3a02032c7_JaffaCakes118.exe
Size

246KB
MD5

352609687804f78238dc53e3a02032c7
SHA1

c60ea598daba30771644b0df272038b13bf13476
SHA256

70d9f426fca628fca9a34c102f663f2ec23c1afde4c0d5f828c6f52fe8cc5b14
SHA512

99a4aa3d939db8fc786eefaaa2564d51a3628e982f0a8c3379b8ab21780835c7f07790872eea204145c9f6569c4d6d67b1cc818d3c362165296a2071c6fbdd5e
SSDEEP

6144:7qYefOB95AFQnovQSr05pKWqn/nZpzapGTijHPVIcDmPrNl:7Ify95mQnuQCepKXnPopLNIcDmPr

Score

6^/10

persistence

Malware Config

Signatures

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\FE5DB4A87ADC = "C:\\Users\\Admin\\AppData\\Local\\Temp\\352609687804f78238dc53e3a02032c7_JaffaCakes118.exe"	352609687804f78238dc53e3a02032c7_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\352609687804f78238dc53e3a02032c7_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\352609687804f78238dc53e3a02032c7_JaffaCakes118.exe"
1⤵
- Adds Run key to start application
PID:4068

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4068-0-0x0000000000400000-0x000000000047D000-memory.dmp

Filesize
500KB

Download
memory/4068-3-0x0000000000510000-0x0000000000513000-memory.dmp

Filesize
12KB

Download
memory/4068-2-0x0000000000400000-0x000000000047D000-memory.dmp

Filesize
500KB

Download
memory/4068-1-0x0000000000400000-0x000000000047D000-memory.dmp

Filesize
500KB

Download
memory/4068-5-0x0000000000400000-0x000000000047D000-memory.dmp

Filesize
500KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads