Analysis
-
max time kernel
146s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
23-05-2024 00:42
General
-
Target
692dbef54cdc9aa6dbcf982ecd41b845_JaffaCakes118.exe
-
Size
4.9MB
-
MD5
692dbef54cdc9aa6dbcf982ecd41b845
-
SHA1
675caa56ea6f899dbf093a3f71e7218975b119a4
-
SHA256
e5c7e0e2ce4a490db079c16b4b4c0888dddccb08395e83926d8a7c02e5a3ec5a
-
SHA512
5502204624b898d09898807f45e5806dc5dc49b514cbe95fff49847e031f8f72d7a89e88d8bf00b196d2b9470b25c594d0957e64ed33612368fb569f66a1a3c6
-
SSDEEP
98304:4QrIBOkRekDsHGe9hs9ahuqRpaLxxn7pJk7v1epj7PiUVPId:rrKTekIme9hs90hRpaLDnlJkxoj7Pd
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 8 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\692dbef54cdc9aa6dbcf982ecd41b845_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\692dbef54cdc9aa6dbcf982ecd41b845_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\Tor\Tor\tor.exe"C:\Users\Admin\AppData\Local\Temp\Tor\Tor\tor.exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.0MB
MD56ed47014c3bb259874d673fb3eaedc85
SHA1c9b29ba7e8a97729c46143cc59332d7a7e9c1ad8
SHA25658be53d5012b3f45c1ca6f4897bece4773efbe1ccbf0be460061c183ee14ca19
SHA5123bc462d21bc762f6eec3d23bb57e2baf532807ab8b46fab1fe38a841e5fde81ed446e5305a78ad0d513d85419e6ec8c4b54985da1d6b198acb793230aeecd93e
-
Filesize
694KB
MD5a12c2040f6fddd34e7acb42f18dd6bdc
SHA1d7db49f1a9870a4f52e1f31812938fdea89e9444
SHA256bd70ba598316980833f78b05f7eeaef3e0f811a7c64196bf80901d155cb647c1
SHA512fbe0970bcdfaa23af624daad9917a030d8f0b10d38d3e9c7808a9fbc02912ee9daed293dbdea87aa90dc74470bc9b89cb6f2fe002393ecda7b565307ffb7ec00
-
Filesize
702KB
MD590f50a285efa5dd9c7fddce786bdef25
SHA154213da21542e11d656bb65db724105afe8be688
SHA25677a250e81fdaf9a075b1244a9434c30bf449012c9b647b265fa81a7b0db2513f
SHA512746422be51031cfa44dd9a6f3569306c34bbe8abf9d2bd1df139d9c938d0cba095c0e05222fd08c8b6deaebef5d3f87569b08fb3261a2d123d983517fb9f43ae
-
Filesize
510KB
MD573d4823075762ee2837950726baa2af9
SHA1ebce3532ed94ad1df43696632ab8cf8da8b9e221
SHA2569aeccf88253d4557a90793e22414868053caaab325842c0d7acb0365e88cd53b
SHA5128f4a65bd35ed69f331769aaf7505f76dd3c64f3fa05cf01d83431ec93a7b1331f3c818ac7008e65b6f1278d7e365ed5940c8c6b8502e77595e112f1faca558b5
-
Filesize
90KB
MD578581e243e2b41b17452da8d0b5b2a48
SHA1eaefb59c31cf07e60a98af48c5348759586a61bb
SHA256f28caebe9bc6aa5a72635acb4f0e24500494e306d8e8b2279e7930981281683f
SHA512332098113ce3f75cb20dc6e09f0d7ba03f13f5e26512d9f3bee3042c51fbb01a5e4426c5e9a5308f7f805b084efc94c28fc9426ce73ab8dfee16ab39b3efe02a
-
Filesize
105KB
MD5fb072e9f69afdb57179f59b512f828a4
SHA1fe71b70173e46ee4e3796db9139f77dc32d2f846
SHA25666d653397cbb2dbb397eb8421218e2c126b359a3b0decc0f31e297df099e1383
SHA5129d157fece0dc18afe30097d9c4178ae147cc9d465a6f1d35778e1bff1efca4734dd096e95d35faea32da8d8b4560382338ba9c6c40f29047f1cc0954b27c64f8
-
Filesize
18.2MB
MD5d497419b0346d8da9c1150344653de57
SHA1db712fbdfd3a902746a27190e70697efce469986
SHA256e67f020b29679e9648f77ee7b0a91b06031d20ce460326c972a7a2660100152b
SHA512ab65d668ccc987f8d351689c7b009c8d75203aacda6f65c903384ef19604a904a5e66e69fff2911dafea74429d2db87481ff148001447df1655ceebf49a1743c
-
Filesize
3.0MB
MD5fe7eb54691ad6e6af77f8a9a0b6de26d
SHA153912d33bec3375153b7e4e68b78d66dab62671a
SHA256e48673680746fbe027e8982f62a83c298d6fb46ad9243de8e79b7e5a24dcd4eb
SHA5128ac6dc5bb016afc869fcbb713f6a14d3692e866b94f4f1ee83b09a7506a8cb58768bd47e081cf6e97b2dacf9f9a6a8ca240d7d20d0b67dbd33238cc861deae8f
-
Filesize
520KB
-
Filesize
136KB
-
Filesize
3.0MB
-
Filesize
3.0MB
-
Filesize
3.0MB
-
Filesize
3.0MB
-
Filesize
136KB
-
Filesize
2.1MB
-
Filesize
3.0MB
-
Filesize
520KB
-
Filesize
272KB
-
Filesize
520KB
-
Filesize
3.0MB
-
Filesize
3.0MB
-
Filesize
520KB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
476KB
-
Filesize
112KB
-
Filesize
520KB
-
Filesize
3.0MB
-
Filesize
3.0MB
-
Filesize
2.1MB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
208KB
-
Filesize
5.0MB
-
Filesize
4KB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
4.7MB
-
Filesize
128KB