b732544befca7176ef46b9071daab0c6041c2bb704772522dc5b7670edfb86ba

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
11/05/2024, 20:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3664452f8edbee3be02f751602fe3337_JaffaCakes118.exe
Size

193KB
MD5

3664452f8edbee3be02f751602fe3337
SHA1

6c9666b26a45f90feeeb8d9e400cb50f01d49ab8
SHA256

b732544befca7176ef46b9071daab0c6041c2bb704772522dc5b7670edfb86ba
SHA512

98b84212c9c547aae1f2719a2f523a2c48d133bf8a5d1a4502ff489fda175071d661108498c3da48ba44193986f68d97e1d49b25af8748c8455d43faae6128ce
SSDEEP

3072:CmvggGQT7vgUqEtyJDDmUjehPhcIQqKYlNtrud19EjgCZnvYmPrM:CgDYhnJDDmOeBzKYlO1wFvzo

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\EasyBooks.job	3664452f8edbee3be02f751602fe3337_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\3664452f8edbee3be02f751602fe3337_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\3664452f8edbee3be02f751602fe3337_JaffaCakes118.exe"
1⤵
- Drops file in Windows directory
PID:2388

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2388-1-0x0000000000290000-0x00000000002D0000-memory.dmp

Filesize
256KB

Download
memory/2388-2-0x0000000000100000-0x000000000012F000-memory.dmp

Filesize
188KB

Download