Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    24/05/2024, 16:20

General

  • Target

    6f1b513d73783d379eaca0439c32146e_JaffaCakes118.exe

  • Size

    370KB

  • MD5

    6f1b513d73783d379eaca0439c32146e

  • SHA1

    020a6daac2b3e4662069fc4c1e1a55436dfcf4d8

  • SHA256

    06cbafda2a84c8d918fd738446d245f993c56fafd3d31f2ebb78b8243c568c3d

  • SHA512

    3c4fbbd2d6543ed70b89557a491f517c2d48d8598ec48b6c9c14b97dca834b3ced92a341a40cfa04b5c8782498a2a07f79eefedfc8c15e690140429a2593a4f6

  • SSDEEP

    6144:dzwtNEyk1AnT0EqUi6RfU7OEhAWPSVuWcHdXhGmLmXXXUl1Iy1WhTj4EwQ5UQ024:dqmyrnrqUi6RfGjCbIcPXnCu0

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\6f1b513d73783d379eaca0439c32146e_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\6f1b513d73783d379eaca0439c32146e_JaffaCakes118.exe"
    1⤵
    • Drops startup file
    • Loads dropped DLL
    PID:2424

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \ProgramData\{10f489fa-4ec8-bb7e-10f4-489fa4ec27e9}\6f1b513d73783d379eaca0439c32146e_JaffaCakes118.exe

          Filesize

          370KB

          MD5

          6f1b513d73783d379eaca0439c32146e

          SHA1

          020a6daac2b3e4662069fc4c1e1a55436dfcf4d8

          SHA256

          06cbafda2a84c8d918fd738446d245f993c56fafd3d31f2ebb78b8243c568c3d

          SHA512

          3c4fbbd2d6543ed70b89557a491f517c2d48d8598ec48b6c9c14b97dca834b3ced92a341a40cfa04b5c8782498a2a07f79eefedfc8c15e690140429a2593a4f6

        • memory/2424-25-0x0000000000810000-0x0000000000811000-memory.dmp

          Filesize

          4KB

        • memory/2424-14-0x0000000000260000-0x0000000000261000-memory.dmp

          Filesize

          4KB

        • memory/2424-3-0x00000000007B0000-0x00000000007DC000-memory.dmp

          Filesize

          176KB

        • memory/2424-24-0x0000000000820000-0x0000000000821000-memory.dmp

          Filesize

          4KB

        • memory/2424-23-0x0000000000800000-0x0000000000801000-memory.dmp

          Filesize

          4KB

        • memory/2424-22-0x0000000000230000-0x0000000000232000-memory.dmp

          Filesize

          8KB

        • memory/2424-21-0x00000000007F0000-0x00000000007F1000-memory.dmp

          Filesize

          4KB

        • memory/2424-20-0x00000000007E0000-0x00000000007E1000-memory.dmp

          Filesize

          4KB

        • memory/2424-30-0x0000000000870000-0x0000000000871000-memory.dmp

          Filesize

          4KB

        • memory/2424-29-0x0000000000860000-0x0000000000861000-memory.dmp

          Filesize

          4KB

        • memory/2424-28-0x0000000000850000-0x0000000000851000-memory.dmp

          Filesize

          4KB

        • memory/2424-27-0x0000000000840000-0x0000000000841000-memory.dmp

          Filesize

          4KB

        • memory/2424-26-0x0000000000830000-0x0000000000831000-memory.dmp

          Filesize

          4KB

        • memory/2424-0-0x0000000000020000-0x0000000000021000-memory.dmp

          Filesize

          4KB

        • memory/2424-2-0x00000000000F0000-0x00000000000F1000-memory.dmp

          Filesize

          4KB

        • memory/2424-17-0x0000000000680000-0x0000000000681000-memory.dmp

          Filesize

          4KB

        • memory/2424-19-0x00000000006A0000-0x00000000006A1000-memory.dmp

          Filesize

          4KB

        • memory/2424-16-0x0000000000670000-0x0000000000671000-memory.dmp

          Filesize

          4KB

        • memory/2424-15-0x0000000000280000-0x0000000000281000-memory.dmp

          Filesize

          4KB

        • memory/2424-18-0x0000000000690000-0x0000000000691000-memory.dmp

          Filesize

          4KB

        • memory/2424-13-0x0000000000250000-0x0000000000251000-memory.dmp

          Filesize

          4KB

        • memory/2424-12-0x0000000000240000-0x0000000000241000-memory.dmp

          Filesize

          4KB

        • memory/2424-11-0x0000000000220000-0x0000000000221000-memory.dmp

          Filesize

          4KB

        • memory/2424-10-0x0000000000210000-0x0000000000211000-memory.dmp

          Filesize

          4KB

        • memory/2424-9-0x0000000000180000-0x0000000000181000-memory.dmp

          Filesize

          4KB

        • memory/2424-8-0x0000000000170000-0x0000000000171000-memory.dmp

          Filesize

          4KB

        • memory/2424-7-0x0000000000160000-0x0000000000161000-memory.dmp

          Filesize

          4KB

        • memory/2424-1-0x0000000000030000-0x0000000000032000-memory.dmp

          Filesize

          8KB

        • memory/2424-38-0x0000000000900000-0x0000000000901000-memory.dmp

          Filesize

          4KB