Analysis
-
max time kernel
132s -
max time network
142s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
-
submitted
27/05/2024, 10:42
General
-
Target
78e2a20a8f97b89571bf40d8c9b765c7_JaffaCakes118.exe
-
Size
312KB
-
MD5
78e2a20a8f97b89571bf40d8c9b765c7
-
SHA1
5a749856141a7d2e2e3db4e60b2e6b9bc251ac50
-
SHA256
c36ce330043bcc52945bab979df41750ade076a409507a80c96de5df7a7803d9
-
SHA512
d8206540fc5913d64cd534aba87bb8bd4b23eab0cbd36ba5e6ec356d1e8257549d5c66bd428d8c4758451093dda5a25beb422094610351f2e053192604d6a8bc
-
SSDEEP
6144:DV24jwRTGLyog2fsAu6i6xgB1A/W1Z0fu96euNY45:DV2mwRTyyog2fsz6xgBumU5
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\78e2a20a8f97b89571bf40d8c9b765c7_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\78e2a20a8f97b89571bf40d8c9b765c7_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Modifies Internet Explorer settings
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
242KB
MD5f6cb534a58dcc29446b518fd294e82ad
SHA1797935cd7ab355a55efa733fe8d7aadd09167d4b
SHA256e7060cc8801db67b198e276e6f92355137ea3afd39797bf6b973b0bc822828df
SHA51230738a097c8c9eecd0fc27b3d02796e5c9400bf7214710e57d932348bfe4752ce80dd6bd0d24c254b3032226bd017b7201a920d8a5b02e37d61a38c171bf28cb
-
Filesize
6.9MB
-
Filesize
264KB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
7.6MB
-
Filesize
4KB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB