Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
01-06-2024 09:58
Static task
static1
Behavioral task
behavioral1
Sample
8a1da4f928f6a15fd5904b697facae64_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
8a1da4f928f6a15fd5904b697facae64_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
8a1da4f928f6a15fd5904b697facae64_JaffaCakes118.exe
-
Size
367KB
-
MD5
8a1da4f928f6a15fd5904b697facae64
-
SHA1
102c2b97d77f536c274e59f37348fdc76459a1de
-
SHA256
154debc98ee44a444d789afe0800de953b102d68ca34f29555fb97dffc72af66
-
SHA512
a41098de417872b31c9e31cfb0f66c25a8f411d1767f5a49d50a1ede4d0096e3b4b371fedfa4ac27d279f1220241d3459261aad02a5b7b0788d49ea5bfda9207
-
SSDEEP
6144:/aYUi7fhRR8eISwpDM84Y9Y2h1IJggp7EXRPNr0JsOUZsMWXGagc:/aYUi7f57ewDeO+Awnagc
Malware Config
Signatures
-
Drops startup file 1 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\8a1da4f928f6a15fd5904b697facae64_JaffaCakes118.lnk 8a1da4f928f6a15fd5904b697facae64_JaffaCakes118.exe -
Loads dropped DLL 1 IoCs
pid Process 3000 8a1da4f928f6a15fd5904b697facae64_JaffaCakes118.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
\ProgramData\{f69fba4c-a3fe-9bf9-f69f-fba4ca3fe932}\8a1da4f928f6a15fd5904b697facae64_JaffaCakes118.exe
Filesize367KB
MD58a1da4f928f6a15fd5904b697facae64
SHA1102c2b97d77f536c274e59f37348fdc76459a1de
SHA256154debc98ee44a444d789afe0800de953b102d68ca34f29555fb97dffc72af66
SHA512a41098de417872b31c9e31cfb0f66c25a8f411d1767f5a49d50a1ede4d0096e3b4b371fedfa4ac27d279f1220241d3459261aad02a5b7b0788d49ea5bfda9207