c1990fc5b30ac2333c6ca9d42c0d2eaf5d2a75386534f9e8fc4058d29cc29901

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
21-05-2024 02:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

61b727ef7e51cda06dd2c8ff35784c95_JaffaCakes118.exe
Size

441KB
MD5

61b727ef7e51cda06dd2c8ff35784c95
SHA1

cdc7143c8ce2f7a3cfee84ce11f11069a827edbb
SHA256

c1990fc5b30ac2333c6ca9d42c0d2eaf5d2a75386534f9e8fc4058d29cc29901
SHA512

52b8ef233db4b09c0d2ab7284c07c877c39aa5f539da1ed24f26554738f72aaa4e3a067e663db492ed2e20c6e66e1dd3d338777611c03c025b56c8c1047ba7b5
SSDEEP

12288:UR4SV1ysOpTUfrGYwSfVi8RQfTdxylxyY:FVJpYfzE+qU

Score

6^/10

persistence

Malware Config

Signatures

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\DE62917EBCA6 = "C:\\Users\\Admin\\AppData\\Local\\Temp\\61b727ef7e51cda06dd2c8ff35784c95_JaffaCakes118.exe"	61b727ef7e51cda06dd2c8ff35784c95_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\61b727ef7e51cda06dd2c8ff35784c95_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\61b727ef7e51cda06dd2c8ff35784c95_JaffaCakes118.exe"
1⤵
- Adds Run key to start application
PID:1728

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1728-1-0x0000000000240000-0x0000000000243000-memory.dmp

Filesize
12KB

Download
memory/1728-0-0x0000000000400000-0x00000000004B3000-memory.dmp

Filesize
716KB

Download
memory/1728-4-0x0000000000400000-0x00000000004B3000-memory.dmp

Filesize
716KB

Download
memory/1728-2-0x0000000000400000-0x00000000004B3000-memory.dmp

Filesize
716KB

Download
memory/1728-7-0x0000000000400000-0x00000000004B3000-memory.dmp

Filesize
716KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads