Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    03-06-2024 11:24

General

  • Target

    919add6b64825b2238835ce28b671b4d_JaffaCakes118.exe

  • Size

    223KB

  • MD5

    919add6b64825b2238835ce28b671b4d

  • SHA1

    ff397dad6e596d79370dcff1d618bad2f9aa726e

  • SHA256

    104fabb606f48c775b3f1911aa95123844153c53603e25c1d5e960c1a7930a4b

  • SHA512

    7221eabe25914c61a063170556a3781f827f7c5bed89bb894109f848f39354c60809a603fd93f6851cd859ececa1dd0b80791915d30ed143cf19b88def354fbe

  • SSDEEP

    3072:aH4KWlzjZkxV4j6iOTQnzktLyQWSzwbDu8dz1kYqICHP:aHSlPnJ3zkLgbDu8YsCHP

Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\919add6b64825b2238835ce28b671b4d_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\919add6b64825b2238835ce28b671b4d_JaffaCakes118.exe"
    1⤵
    • Drops file in Windows directory
    PID:1520

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1520-0-0x0000000000020000-0x0000000000021000-memory.dmp

    Filesize

    4KB

  • memory/1520-2-0x0000000000080000-0x0000000000081000-memory.dmp

    Filesize

    4KB

  • memory/1520-5-0x0000000000270000-0x0000000000290000-memory.dmp

    Filesize

    128KB

  • memory/1520-4-0x0000000000160000-0x0000000000161000-memory.dmp

    Filesize

    4KB

  • memory/1520-3-0x00000000000D0000-0x00000000000D1000-memory.dmp

    Filesize

    4KB

  • memory/1520-1-0x0000000000030000-0x0000000000031000-memory.dmp

    Filesize

    4KB

  • memory/1520-10-0x0000000000270000-0x0000000000290000-memory.dmp

    Filesize

    128KB

  • memory/1520-6-0x0000000000700000-0x000000000072F000-memory.dmp

    Filesize

    188KB

  • memory/1520-18-0x0000000000270000-0x0000000000290000-memory.dmp

    Filesize

    128KB