Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    05/06/2024, 03:26

General

  • Target

    9715c4ed776d85828f6c74ca0a31b3e1_JaffaCakes118.exe

  • Size

    44KB

  • MD5

    9715c4ed776d85828f6c74ca0a31b3e1

  • SHA1

    758aa4c13ae8369cf0db0cf84374934b82e647b1

  • SHA256

    f18e74612c8143ba89fe541f96c44d878235c2dda8ae23e290147cee21b5946d

  • SHA512

    56852d9251b041f49949bd00a40bfdd8e670191cd05aa7952d0954980b634539389f3bf579777b27b60603eab13087d1f330ba61580444731d1afb78e17f2903

  • SSDEEP

    768:1FZ/OLJbtC7ljKv9LuO2j840qp8tdXFcBrshGDcgaHd3cw6xTnsG7wS1+EMLctqe:1FRQJmNKMjfp8NcC82HdsrvkS+Lo5b

Score
8/10

Malware Config

Signatures

  • Drops file in Drivers directory 2 IoCs
  • Adds Run key to start application 2 TTPs 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9715c4ed776d85828f6c74ca0a31b3e1_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\9715c4ed776d85828f6c74ca0a31b3e1_JaffaCakes118.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    PID:1684

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1684-0-0x0000000000400000-0x0000000000438000-memory.dmp

          Filesize

          224KB

        • memory/1684-1-0x0000000000290000-0x0000000000292000-memory.dmp

          Filesize

          8KB

        • memory/1684-2-0x0000000000400000-0x0000000000438000-memory.dmp

          Filesize

          224KB