Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    04-06-2024 01:50

General

  • Target

    9354b2e749d11f48d80bfd92219fa387_JaffaCakes118.exe

  • Size

    314KB

  • MD5

    9354b2e749d11f48d80bfd92219fa387

  • SHA1

    24a3619fafdc112f69b1cba5606658f3b05b649e

  • SHA256

    068bef8e19d6a2dd7c6b801b458d075c188c6f21c8825b5d86b00645528c3f87

  • SHA512

    a6519d1fe53af122bc3a95c297a90c78f61357c46abb85f1b761123681f450ca02cb3780fecec0a4d53641f3df305834619df87f658db5c6a7d5ab4f59ed72a8

  • SSDEEP

    6144:xIIVP8i9RZEQCTJX7DKs0MlqOBKjKX05nx9Rlvu+I:aCP8i9PLCTJL+fEqO4jKyx9RlG+I

Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9354b2e749d11f48d80bfd92219fa387_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\9354b2e749d11f48d80bfd92219fa387_JaffaCakes118.exe"
    1⤵
    • Drops file in Windows directory
    PID:2900

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2900-0-0x0000000000020000-0x0000000000021000-memory.dmp

    Filesize

    4KB

  • memory/2900-2-0x0000000000130000-0x0000000000131000-memory.dmp

    Filesize

    4KB

  • memory/2900-1-0x0000000000030000-0x0000000000031000-memory.dmp

    Filesize

    4KB

  • memory/2900-3-0x0000000000150000-0x0000000000170000-memory.dmp

    Filesize

    128KB

  • memory/2900-4-0x0000000000140000-0x0000000000141000-memory.dmp

    Filesize

    4KB

  • memory/2900-9-0x0000000000150000-0x0000000000170000-memory.dmp

    Filesize

    128KB

  • memory/2900-5-0x0000000001240000-0x000000000126F000-memory.dmp

    Filesize

    188KB

  • memory/2900-17-0x0000000000150000-0x0000000000170000-memory.dmp

    Filesize

    128KB