Analysis

  • max time kernel
    131s
  • max time network
    124s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/05/2024, 12:27

General

  • Target

    87010e625049cd04f16fdc0bd9ce938e_JaffaCakes118.exe

  • Size

    456KB

  • MD5

    87010e625049cd04f16fdc0bd9ce938e

  • SHA1

    c0410fbdc07bc49d79e1ee01072c2197f59e37c9

  • SHA256

    04beebb961e7c26b37b582adc3b8df7e28e5c8a71d3b9a95ad565617af0a88e2

  • SHA512

    ff5508c69749fbe7ff0f9e6cb6925e21907607127805208f04a13617f45f8472ac8101a78945cf48cdeb40c6da5bb0d97f3bb777c02b14eed92a9abf2cd9dafb

  • SSDEEP

    6144:whAm9YtgzRk4a1cZstaQxjHrLSAfQObRTpcXeLgm9w2/Glva9iZ7qikbVm+AIUO:wAmsg2Ac99v1oObRTvyy7/yIUO

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\87010e625049cd04f16fdc0bd9ce938e_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\87010e625049cd04f16fdc0bd9ce938e_JaffaCakes118.exe"
    1⤵
    • Drops startup file
    PID:1472

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1472-0-0x0000000000780000-0x0000000000781000-memory.dmp

          Filesize

          4KB

        • memory/1472-1-0x0000000000790000-0x0000000000792000-memory.dmp

          Filesize

          8KB

        • memory/1472-7-0x0000000002FE0000-0x0000000002FE1000-memory.dmp

          Filesize

          4KB

        • memory/1472-14-0x0000000003480000-0x0000000003481000-memory.dmp

          Filesize

          4KB

        • memory/1472-21-0x0000000003510000-0x0000000003511000-memory.dmp

          Filesize

          4KB

        • memory/1472-22-0x0000000003530000-0x0000000003531000-memory.dmp

          Filesize

          4KB

        • memory/1472-20-0x00000000034D0000-0x00000000034D1000-memory.dmp

          Filesize

          4KB

        • memory/1472-19-0x00000000034A0000-0x00000000034A1000-memory.dmp

          Filesize

          4KB

        • memory/1472-18-0x00000000034C0000-0x00000000034C1000-memory.dmp

          Filesize

          4KB

        • memory/1472-17-0x00000000034B0000-0x00000000034B1000-memory.dmp

          Filesize

          4KB

        • memory/1472-16-0x0000000003460000-0x0000000003461000-memory.dmp

          Filesize

          4KB

        • memory/1472-15-0x0000000003490000-0x0000000003491000-memory.dmp

          Filesize

          4KB

        • memory/1472-13-0x0000000003470000-0x0000000003471000-memory.dmp

          Filesize

          4KB

        • memory/1472-12-0x0000000003450000-0x0000000003451000-memory.dmp

          Filesize

          4KB

        • memory/1472-11-0x0000000003410000-0x0000000003412000-memory.dmp

          Filesize

          8KB

        • memory/1472-10-0x0000000003440000-0x0000000003441000-memory.dmp

          Filesize

          4KB

        • memory/1472-9-0x0000000003430000-0x0000000003431000-memory.dmp

          Filesize

          4KB

        • memory/1472-8-0x0000000003420000-0x0000000003421000-memory.dmp

          Filesize

          4KB

        • memory/1472-6-0x0000000002FD0000-0x0000000002FD1000-memory.dmp

          Filesize

          4KB

        • memory/1472-5-0x0000000002FC0000-0x0000000002FC1000-memory.dmp

          Filesize

          4KB

        • memory/1472-4-0x0000000002FB0000-0x0000000002FB1000-memory.dmp

          Filesize

          4KB

        • memory/1472-3-0x0000000000EE0000-0x0000000000EE1000-memory.dmp

          Filesize

          4KB

        • memory/1472-2-0x00000000007A0000-0x00000000007A1000-memory.dmp

          Filesize

          4KB

        • memory/1472-24-0x0000000003550000-0x0000000003551000-memory.dmp

          Filesize

          4KB

        • memory/1472-23-0x0000000003520000-0x0000000003521000-memory.dmp

          Filesize

          4KB

        • memory/1472-25-0x0000000003540000-0x0000000003541000-memory.dmp

          Filesize

          4KB

        • memory/1472-26-0x00000000034E0000-0x000000000350C000-memory.dmp

          Filesize

          176KB

        • memory/1472-30-0x00000000038B0000-0x00000000038B1000-memory.dmp

          Filesize

          4KB

        • memory/1472-31-0x0000000004990000-0x0000000004991000-memory.dmp

          Filesize

          4KB

        • memory/1472-38-0x0000000003100000-0x0000000003101000-memory.dmp

          Filesize

          4KB