068a6991b1395cce5da889da33790ac5d248ce1c87588b6d33f4d7584c284628

Analysis

max time kernel
117s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
14/05/2024, 09:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

40f29322520f6cf9a500c9ec705e74ad_JaffaCakes118.exe
Size

224KB
MD5

40f29322520f6cf9a500c9ec705e74ad
SHA1

bcc58d23977784c96176b4c1c809d8e1e04a861e
SHA256

068a6991b1395cce5da889da33790ac5d248ce1c87588b6d33f4d7584c284628
SHA512

3d9ad7e8e15c01e1177ba3e875bb85722cd9f2cf72ff563a062617ff2a3e7ce923ae65fc3e7dc59133f78560da538ee1ca1949be6177c20d8ca445217da6f09a
SSDEEP

3072:y0g8BfHJWn5cj5QE6wGo8EGNwfC/V2L1omVp0N9PEuEbUHKQaO9e:y0gIHDYX/V23V0KXGKQaO9e

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\ExtraWalk.job	40f29322520f6cf9a500c9ec705e74ad_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\40f29322520f6cf9a500c9ec705e74ad_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\40f29322520f6cf9a500c9ec705e74ad_JaffaCakes118.exe"
1⤵
- Drops file in Windows directory
PID:2020

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2020-0-0x00000000000B0000-0x00000000000F1000-memory.dmp

Filesize
260KB

Download
memory/2020-1-0x00000000000B0000-0x00000000000F1000-memory.dmp

Filesize
260KB

Download
memory/2020-2-0x00000000000B0000-0x00000000000F1000-memory.dmp

Filesize
260KB

Download
memory/2020-3-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/2020-4-0x00000000001D0000-0x00000000001FF000-memory.dmp

Filesize
188KB

Download
memory/2020-8-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/2020-16-0x0000000000020000-0x0000000000040000-memory.dmp

Filesize
128KB

Download
memory/2020-17-0x00000000000B0000-0x00000000000F1000-memory.dmp

Filesize
260KB

Download