Overview

overview

6

Static

static

3

74a1e4f8c4...18.exe

windows7-x64

6

74a1e4f8c4...18.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    132s
  • max time network
    125s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-05-2024 06:42

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    74a1e4f8c48502f4cf6bdf1ff5c842a8_JaffaCakes118.exe

  • Size

    691KB

  • MD5

    74a1e4f8c48502f4cf6bdf1ff5c842a8

  • SHA1

    ac709a266cb8afaf136986e5e5f93a37ba22c410

  • SHA256

    c4dc5ce27a5d56ed4c621fc17dc8febb54acd0db97788d6c539b9ae026d0d8a4

  • SHA512

    b26bf7cd4c00548d2e0e8d6fd601f3bfac9491a69a37046932bf144a2ccc29117413b3f4169498b357e94d596ce1dfbeae4a42d91da713dfc4df77e45bb936f7

  • SSDEEP

    12288:44I1R/pP6USobBbcY4JiOBRXjIjO8Zsq4nss:44EREUSobBbeJ7RCZN4ss

Score
6/10
bootkitpersistence

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

    bootkitpersistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\74a1e4f8c48502f4cf6bdf1ff5c842a8_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\74a1e4f8c48502f4cf6bdf1ff5c842a8_JaffaCakes118.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:2692

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2692-0-0x0000000000400000-0x00000000004B2000-memory.dmp

    Filesize

    712KB

    Download