9f78bc1ce9f0c74f98e79211e29bb7a0e4aaac351eb70078703099c33056004a

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
12-05-2024 01:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

377d30c99c8b1eb57aa58bb1e822f77a_JaffaCakes118.exe
Size

209KB
MD5

377d30c99c8b1eb57aa58bb1e822f77a
SHA1

4b654442ec854815955d2d2d94b21b2f3d50b0a5
SHA256

9f78bc1ce9f0c74f98e79211e29bb7a0e4aaac351eb70078703099c33056004a
SHA512

a993e98eeb38b2e6f1e6312291ba0f8990f6ec2b94176572329e99c8b09fda15b64703a2c559958df07e6ffcb8d2181881d5aa5336b7a0a849db3f403eefca1d
SSDEEP

3072:9tsnlTcIPswk7ePy9PPGOGjwtn6vdrhGEGj9pvdUMQA49tELuM13KgJBx8m//+qU:L4cIUwkaPoeZon6vzG7zv+5tKXKYxoqU

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\Bidaily Synchronize Task[973b].job	377d30c99c8b1eb57aa58bb1e822f77a_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\377d30c99c8b1eb57aa58bb1e822f77a_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\377d30c99c8b1eb57aa58bb1e822f77a_JaffaCakes118.exe"
1⤵
- Drops file in Windows directory
PID:2980

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2980-0-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/2980-1-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/2980-6-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/2980-2-0x0000000000110000-0x000000000013F000-memory.dmp

Filesize
188KB

Download
memory/2980-13-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download