Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
01/06/2024, 09:30
General
-
Target
8a0bc26b8763cb0128219e7830dbe3c5_JaffaCakes118.exe
-
Size
164KB
-
MD5
8a0bc26b8763cb0128219e7830dbe3c5
-
SHA1
0abd197e6a12d6ef79ad7744a6d1691fb5c61793
-
SHA256
24ea7dadb4ea02af743a2eb15ea73572e3dd92719349311c1072bf82c355105d
-
SHA512
ba4c0c713cd6c5d815bb0251726c9b144fa68d2cd333b1c5487020f066f2763bb46594feee75c73bb8e08827087883803fddeebe859f80a45313ea95cd164d09
-
SSDEEP
3072:39evHrrRXqQDRrs23xgWwHLdRFrz2VrN/LM/vhkJzW/4J+eO5PIO0gS:30vLrp9rsTDLdPGNY/vh0zWQJ+X5PIOF
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 4 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8a0bc26b8763cb0128219e7830dbe3c5_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\8a0bc26b8763cb0128219e7830dbe3c5_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\ins2782\ins2782.exe"C:\Users\Admin\AppData\Local\Temp\ins2782\ins2782.exe" ins.exe /e5353147 /u50d19690-97d8-405e-bebb-08625bc06f2f2⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
252KB
MD52b8fb03bf38cb33a98d804cfdc2bb2c0
SHA1962a9850ff0728f80c14878859dc2307f6ab0ff2
SHA25601053b858d8d24f62c5520fb0255d16e728d27d173c15d2d4082ffdf85adf5e8
SHA51218b0d66a8152014d8e2ad03b8f1b80c69d9ebb805215735b476643fbd2fdb0e817b89f81beae604c969ad2b94225032f507e911c9874a735f2dfed32cf3925df
-
Filesize
512KB
-
Filesize
64KB
-
Filesize
512KB
-
Filesize
4KB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB