12012ae687b8700bbfdcde02fd62162c9f4336844c81085e8f1e1d4b282a1e4e

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
21-05-2024 09:32

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

62d130ccaf799ed20d66cf345761f5e5_JaffaCakes118.exe
Size

194KB
MD5

62d130ccaf799ed20d66cf345761f5e5
SHA1

f0000cbf8ead5bb861b53b4a0b5bde3acdd4ff73
SHA256

12012ae687b8700bbfdcde02fd62162c9f4336844c81085e8f1e1d4b282a1e4e
SHA512

6df3909f4e0f2727501fece85295f31a2ba3a271ab85eddca3bdccff059da2511ab9828d936e552818943e5b85d6fa97cdf3c8d3b1e25021522c52bb1e172d5e
SSDEEP

3072:BMA8ClsulwD9vseuQ3ajoeXtr+kXzO8e19GHSpKOWN8vp:b8Cls2sTuQKkwtqkDOrQ8vp

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\StatMaster.job	62d130ccaf799ed20d66cf345761f5e5_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\62d130ccaf799ed20d66cf345761f5e5_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\62d130ccaf799ed20d66cf345761f5e5_JaffaCakes118.exe"
1⤵
- Drops file in Windows directory
PID:2344

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2344-1-0x0000000001320000-0x0000000001360000-memory.dmp

Filesize
256KB

Download
memory/2344-2-0x0000000000150000-0x000000000017F000-memory.dmp

Filesize
188KB

Download