Analysis

  • max time kernel
    93s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-05-2024 22:27

General

  • Target

    8227695260e26e3f4452efb0fd83b9c7_JaffaCakes118.exe

  • Size

    458KB

  • MD5

    8227695260e26e3f4452efb0fd83b9c7

  • SHA1

    cc641e6a117a15d12d4806ea7d7319cb13afeaa5

  • SHA256

    5dcc8f72fd6af89acaf714ed29d84e8026b6e52a9574abb3fadd182485f95aa5

  • SHA512

    f372e9c8ebbf69e05f5d52418b30789a80d6970554763b583ab450a2cedcd5d3b6363faecf3a24467d9e28347b6ca5185cc8fd70aae8a36ce198df07a7434117

  • SSDEEP

    12288:VWQr3MbQ5xDQ4la9cjfhxnlZvD5+sT3r97:VWQjb5JXpLl+297

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\8227695260e26e3f4452efb0fd83b9c7_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\8227695260e26e3f4452efb0fd83b9c7_JaffaCakes118.exe"
    1⤵
    • Drops startup file
    PID:2164

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2164-0-0x0000000000DE0000-0x0000000000DE1000-memory.dmp

    Filesize

    4KB

  • memory/2164-1-0x0000000000DF0000-0x0000000000DF2000-memory.dmp

    Filesize

    8KB

  • memory/2164-2-0x0000000000E00000-0x0000000000E01000-memory.dmp

    Filesize

    4KB

  • memory/2164-4-0x0000000000FC0000-0x0000000000FC1000-memory.dmp

    Filesize

    4KB

  • memory/2164-3-0x0000000000FA0000-0x0000000000FA1000-memory.dmp

    Filesize

    4KB

  • memory/2164-7-0x00000000014D0000-0x00000000014D1000-memory.dmp

    Filesize

    4KB

  • memory/2164-6-0x00000000014C0000-0x00000000014C1000-memory.dmp

    Filesize

    4KB

  • memory/2164-5-0x00000000014B0000-0x00000000014B1000-memory.dmp

    Filesize

    4KB

  • memory/2164-14-0x0000000001590000-0x0000000001591000-memory.dmp

    Filesize

    4KB

  • memory/2164-17-0x00000000015E0000-0x00000000015E1000-memory.dmp

    Filesize

    4KB

  • memory/2164-16-0x0000000001520000-0x0000000001522000-memory.dmp

    Filesize

    8KB

  • memory/2164-15-0x00000000015A0000-0x00000000015A1000-memory.dmp

    Filesize

    4KB

  • memory/2164-13-0x0000000001580000-0x0000000001581000-memory.dmp

    Filesize

    4KB

  • memory/2164-12-0x0000000001570000-0x0000000001571000-memory.dmp

    Filesize

    4KB

  • memory/2164-11-0x0000000001560000-0x0000000001561000-memory.dmp

    Filesize

    4KB

  • memory/2164-10-0x0000000001550000-0x0000000001551000-memory.dmp

    Filesize

    4KB

  • memory/2164-9-0x0000000001540000-0x0000000001541000-memory.dmp

    Filesize

    4KB

  • memory/2164-8-0x0000000001530000-0x0000000001531000-memory.dmp

    Filesize

    4KB

  • memory/2164-24-0x00000000015B0000-0x00000000015DC000-memory.dmp

    Filesize

    176KB

  • memory/2164-23-0x00000000035C0000-0x00000000035C1000-memory.dmp

    Filesize

    4KB

  • memory/2164-22-0x00000000035B0000-0x00000000035B1000-memory.dmp

    Filesize

    4KB

  • memory/2164-21-0x00000000035A0000-0x00000000035A1000-memory.dmp

    Filesize

    4KB

  • memory/2164-20-0x0000000003590000-0x0000000003591000-memory.dmp

    Filesize

    4KB

  • memory/2164-19-0x0000000003560000-0x0000000003561000-memory.dmp

    Filesize

    4KB

  • memory/2164-18-0x0000000003570000-0x0000000003571000-memory.dmp

    Filesize

    4KB

  • memory/2164-31-0x00000000014E0000-0x00000000014E1000-memory.dmp

    Filesize

    4KB

  • memory/2164-30-0x00000000035D0000-0x00000000035D1000-memory.dmp

    Filesize

    4KB

  • memory/2164-29-0x00000000035E0000-0x00000000035E1000-memory.dmp

    Filesize

    4KB

  • memory/2164-28-0x0000000003580000-0x0000000003581000-memory.dmp

    Filesize

    4KB

  • memory/2164-38-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB