Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
22-05-2024 23:24
Static task
static1
Behavioral task
behavioral1
Sample
68fd3cbfe45ea12f7783d8184eeb8381_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
68fd3cbfe45ea12f7783d8184eeb8381_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
68fd3cbfe45ea12f7783d8184eeb8381_JaffaCakes118.exe
-
Size
350KB
-
MD5
68fd3cbfe45ea12f7783d8184eeb8381
-
SHA1
232ea65b875637c55ac70b461aa7b14c19c2d7cf
-
SHA256
204c1236b3dfb84966f222ea5d6581722bcabb807dacb49946dd8fd1243bd44e
-
SHA512
f568c183347045e365b85905ccaec9b1b20237dd4d67c8664bed007c09391f03a4b1ee4370e232ea5843bbd5b98cda00f453421c1375af02f0bf96fa73618eb5
-
SSDEEP
6144:69/HVfRD8RAQW914ot3vvl+RTcTXepQfWND6u3SFI5zSvYN7Lz:65HV5D8z2BvkRTPdN7Lz
Malware Config
Signatures
-
Drops startup file 1 IoCs
Processes:
68fd3cbfe45ea12f7783d8184eeb8381_JaffaCakes118.exedescription ioc process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\68fd3cbfe45ea12f7783d8184eeb8381_JaffaCakes118.lnk 68fd3cbfe45ea12f7783d8184eeb8381_JaffaCakes118.exe -
Loads dropped DLL 1 IoCs
Processes:
68fd3cbfe45ea12f7783d8184eeb8381_JaffaCakes118.exepid process 2860 68fd3cbfe45ea12f7783d8184eeb8381_JaffaCakes118.exe -
Drops file in Windows directory 1 IoCs
Processes:
68fd3cbfe45ea12f7783d8184eeb8381_JaffaCakes118.exedescription ioc process File created C:\Windows\Tasks\Bidaily Synchronize Task.job 68fd3cbfe45ea12f7783d8184eeb8381_JaffaCakes118.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
\ProgramData\{d23b7e42-727d-d8ba-d23b-b7e42727f909}\68fd3cbfe45ea12f7783d8184eeb8381_JaffaCakes118.exe
Filesize350KB
MD568fd3cbfe45ea12f7783d8184eeb8381
SHA1232ea65b875637c55ac70b461aa7b14c19c2d7cf
SHA256204c1236b3dfb84966f222ea5d6581722bcabb807dacb49946dd8fd1243bd44e
SHA512f568c183347045e365b85905ccaec9b1b20237dd4d67c8664bed007c09391f03a4b1ee4370e232ea5843bbd5b98cda00f453421c1375af02f0bf96fa73618eb5