Analysis
- max time kernel
134s - max time network
123s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
- submitted
28/05/2024, 13:48
General
- Target 7d2e18c44bcef12c95725074a443e613_JaffaCakes118.exe
- Size 370KB
- Sample240528-q4fbdsha79
- SHA256 b05115c1b0fdaf67cbb7cf952c89a6cedcec0d1dc933a21bb9d3460a18a4a394
Malware Config
Signatures
- Drops startup file 1 IoCs
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\7d2e18c44bcef12c95725074a443e613_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\7d2e18c44bcef12c95725074a443e613_JaffaCakes118.exe"1⤵
- Drops startup file
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2596-0-0x0000000000FA0000-0x0000000000FA1000-memory.dmp
memory/2596-1-0x0000000000FB0000-0x0000000000FB2000-memory.dmp
memory/2596-2-0x0000000000FD0000-0x0000000000FD1000-memory.dmp
memory/2596-3-0x0000000001740000-0x0000000001741000-memory.dmp
memory/2596-15-0x0000000003CB0000-0x0000000003CB1000-memory.dmp
memory/2596-20-0x0000000003D20000-0x0000000003D21000-memory.dmp
memory/2596-19-0x0000000003D00000-0x0000000003D01000-memory.dmp
memory/2596-18-0x0000000003D10000-0x0000000003D11000-memory.dmp
memory/2596-17-0x0000000003C80000-0x0000000003C81000-memory.dmp
memory/2596-16-0x0000000003CC0000-0x0000000003CC1000-memory.dmp
memory/2596-14-0x0000000003CA0000-0x0000000003CA1000-memory.dmp
memory/2596-13-0x0000000003C90000-0x0000000003C91000-memory.dmp
memory/2596-12-0x0000000003C70000-0x0000000003C71000-memory.dmp
memory/2596-11-0x0000000003C30000-0x0000000003C32000-memory.dmp
memory/2596-10-0x0000000003C60000-0x0000000003C61000-memory.dmp
memory/2596-9-0x0000000003C50000-0x0000000003C51000-memory.dmp
memory/2596-8-0x0000000003C40000-0x0000000003C41000-memory.dmp
memory/2596-7-0x0000000001E00000-0x0000000001E01000-memory.dmp
memory/2596-6-0x0000000001DF0000-0x0000000001DF1000-memory.dmp
memory/2596-5-0x0000000001DE0000-0x0000000001DE1000-memory.dmp
memory/2596-4-0x0000000001DD0000-0x0000000001DD1000-memory.dmp
memory/2596-21-0x0000000003CD0000-0x0000000003CFC000-memory.dmp
memory/2596-27-0x0000000003D70000-0x0000000003D71000-memory.dmp
memory/2596-26-0x0000000003D60000-0x0000000003D61000-memory.dmp
memory/2596-25-0x0000000003D50000-0x0000000003D51000-memory.dmp
memory/2596-24-0x0000000003D40000-0x0000000003D41000-memory.dmp
memory/2596-23-0x0000000003D30000-0x0000000003D31000-memory.dmp
memory/2596-30-0x00000000040C0000-0x00000000040C1000-memory.dmp