Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
02-06-2024 19:56
Static task
static1
Behavioral task
behavioral1
Sample
8f3c609a15f8b1abd34441443bb9dea8_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8f3c609a15f8b1abd34441443bb9dea8_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
8f3c609a15f8b1abd34441443bb9dea8_JaffaCakes118.exe
-
Size
456KB
-
MD5
8f3c609a15f8b1abd34441443bb9dea8
-
SHA1
83dd404f6c89a54f43e0f738afe44dde88434f70
-
SHA256
16a4e5a2c5cddfc5b03fc04390dc3a73bb23c94ba25741dc20a029095114ad0c
-
SHA512
8780aa49e96170f3c0f2be7240fc780e51ab741fd699051f6f9b43c14d9de0a93571397d06b48407b4a3425d50f75e572886db85f9a360e337b2471c7ec76da3
-
SSDEEP
12288:67dh1Hg0NeiCN5FZrh5pue2J8cYDGP+kPnZ:sVpeiCbrh5w9J80Z
Malware Config
Signatures
-
Drops startup file 1 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\8f3c609a15f8b1abd34441443bb9dea8_JaffaCakes118.lnk 8f3c609a15f8b1abd34441443bb9dea8_JaffaCakes118.exe -
Loads dropped DLL 1 IoCs
pid Process 2248 8f3c609a15f8b1abd34441443bb9dea8_JaffaCakes118.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
\ProgramData\{ee36bea6-c19b-5c73-ee36-6bea6c19fa9b}\8f3c609a15f8b1abd34441443bb9dea8_JaffaCakes118.exe
Filesize456KB
MD58f3c609a15f8b1abd34441443bb9dea8
SHA183dd404f6c89a54f43e0f738afe44dde88434f70
SHA25616a4e5a2c5cddfc5b03fc04390dc3a73bb23c94ba25741dc20a029095114ad0c
SHA5128780aa49e96170f3c0f2be7240fc780e51ab741fd699051f6f9b43c14d9de0a93571397d06b48407b4a3425d50f75e572886db85f9a360e337b2471c7ec76da3