117d50504595e73ec89986735f32e1fe76ce123df7ac01b6386f6072dc8e4aca

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
05-06-2024 20:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

991d3d45fd247bb9cc7158610d924e9a_JaffaCakes118.exe
Size

219KB
MD5

991d3d45fd247bb9cc7158610d924e9a
SHA1

65f051d7c756a21aebcc7836f8f8ed9ffa03553c
SHA256

117d50504595e73ec89986735f32e1fe76ce123df7ac01b6386f6072dc8e4aca
SHA512

30a9d6db3a841577da3c40fb25b77b5800c2ede713da0a70233ba1ffe36614edec4eda0ec32e67046957f1f5cbd268e0621e1928011072c9be6bb5874e8e3677
SSDEEP

3072:y+j3qC6jcVruN/Y5sMQh4xQU9HiXHQu6EsaFimv3yifjDuHFcZXFgwLNQyglM:y+2ZjMGYxGUwwuIaFVjDulcZXFxNjgq

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\MusicMaster.job	991d3d45fd247bb9cc7158610d924e9a_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\991d3d45fd247bb9cc7158610d924e9a_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\991d3d45fd247bb9cc7158610d924e9a_JaffaCakes118.exe"
1⤵
- Drops file in Windows directory
PID:3012

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3012-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/3012-1-0x0000000000030000-0x0000000000031000-memory.dmp

Filesize
4KB

Download
memory/3012-2-0x00000000000F0000-0x00000000000F1000-memory.dmp

Filesize
4KB

Download
memory/3012-3-0x0000000000100000-0x0000000000101000-memory.dmp

Filesize
4KB

Download
memory/3012-4-0x0000000000110000-0x0000000000130000-memory.dmp

Filesize
128KB

Download
memory/3012-9-0x0000000000110000-0x0000000000130000-memory.dmp

Filesize
128KB

Download
memory/3012-5-0x0000000000570000-0x000000000059F000-memory.dmp

Filesize
188KB

Download
memory/3012-17-0x0000000000110000-0x0000000000130000-memory.dmp

Filesize
128KB

Download