Analysis
-
max time kernel
120s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
22-05-2024 20:55
Static task
static1
Behavioral task
behavioral1
Sample
689a7398526538d3061b4fde34c80afb_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
689a7398526538d3061b4fde34c80afb_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
689a7398526538d3061b4fde34c80afb_JaffaCakes118.exe
-
Size
475KB
-
MD5
689a7398526538d3061b4fde34c80afb
-
SHA1
3d673d297dee4e676fa8276a636aedaaba78c3e7
-
SHA256
9dfbb71447a04ca936ba48f367cfaed2892a3356b0115fd875e09f3612be3d61
-
SHA512
d2895ad516f971628140edadd8d4ff77babb709c5f77af871c266337c64e3e1954c2e8ec3bc7db185a0ff92ce1b083c050242a4ca9d9fc509768c30255039356
-
SSDEEP
6144:y8M5ajo6AhhgYKdDYDAUz1OhGKzzqZ3SFxw6AGWb1C3sr+sGGzAes7oWsPQcB1R7:y/5oo1HgDYsUzwAOz6SXC1r+lqRJ
Malware Config
Signatures
-
Drops startup file 1 IoCs
Processes:
689a7398526538d3061b4fde34c80afb_JaffaCakes118.exedescription ioc process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\689a7398526538d3061b4fde34c80afb_JaffaCakes118.lnk 689a7398526538d3061b4fde34c80afb_JaffaCakes118.exe -
Loads dropped DLL 1 IoCs
Processes:
689a7398526538d3061b4fde34c80afb_JaffaCakes118.exepid process 108 689a7398526538d3061b4fde34c80afb_JaffaCakes118.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
\ProgramData\{51a2cb7c-ab3c-ab44-51a2-2cb7cab32df2}\689a7398526538d3061b4fde34c80afb_JaffaCakes118.exe
Filesize475KB
MD5689a7398526538d3061b4fde34c80afb
SHA13d673d297dee4e676fa8276a636aedaaba78c3e7
SHA2569dfbb71447a04ca936ba48f367cfaed2892a3356b0115fd875e09f3612be3d61
SHA512d2895ad516f971628140edadd8d4ff77babb709c5f77af871c266337c64e3e1954c2e8ec3bc7db185a0ff92ce1b083c050242a4ca9d9fc509768c30255039356