Analysis
-
max time kernel
143s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
23-05-2024 01:15
Static task
static1
Behavioral task
behavioral1
Sample
694179f30faedbb710f1ec79a0a84d29_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
694179f30faedbb710f1ec79a0a84d29_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
694179f30faedbb710f1ec79a0a84d29_JaffaCakes118.exe
-
Size
127KB
-
MD5
694179f30faedbb710f1ec79a0a84d29
-
SHA1
3b9ae8a5efe4231e4721e2f4da4dd1125c0fa6aa
-
SHA256
aeb97a85f33ec1067e5c01de8089be898c5d41f8a8ee824eab9318efd2b68720
-
SHA512
270af322ecd68136deb026034816028dcccd560545a4082b4ce067d40e5763871d359554c08e976a53c1391e67b27ee8c61b3e2694f90debd8a62a331bba5012
-
SSDEEP
3072:IxTqpdA3f6QNf2IPO4DpmWpAsfYbTOBoefYi6a9k20tA3Z/cc9:q2pdqfv2IPOGfXf5ovWJUq
Malware Config
Signatures
-
Drops file in Windows directory 1 IoCs
Processes:
694179f30faedbb710f1ec79a0a84d29_JaffaCakes118.exedescription ioc process File created C:\Windows\dextor32.exe 694179f30faedbb710f1ec79a0a84d29_JaffaCakes118.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\694179f30faedbb710f1ec79a0a84d29_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\694179f30faedbb710f1ec79a0a84d29_JaffaCakes118.exe"1⤵
- Drops file in Windows directory
PID:3016
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3972 --field-trial-handle=2328,i,5873823382323802923,13134441441264702821,262144 --variations-seed-version /prefetch:81⤵PID:1524
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
127KB
MD5694179f30faedbb710f1ec79a0a84d29
SHA13b9ae8a5efe4231e4721e2f4da4dd1125c0fa6aa
SHA256aeb97a85f33ec1067e5c01de8089be898c5d41f8a8ee824eab9318efd2b68720
SHA512270af322ecd68136deb026034816028dcccd560545a4082b4ce067d40e5763871d359554c08e976a53c1391e67b27ee8c61b3e2694f90debd8a62a331bba5012