ef842ff61b14a45a74d2ff91cbb30337b0ce511dd0c6a684db5fffda0c6022fb

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10-06-2024 22:05

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9c179490769c014d01f6865ef56a4761_JaffaCakes118.exe
Size

4.4MB
MD5

9c179490769c014d01f6865ef56a4761
SHA1

dea71572dda881af6169c26a5ea344c170a80abc
SHA256

ef842ff61b14a45a74d2ff91cbb30337b0ce511dd0c6a684db5fffda0c6022fb
SHA512

beb1411e6e0c037a6760e2332317256a6eef45d9c9c0b8cb7cf3b3fa1a6996852bec08aeb804740298852ef02b83db804f9ee687b312e46c90d793a1432cc7da
SSDEEP

24576:6y14jj33AIXSFyqNdCnnQOZmjvWJAdAqdSwIg194ObZpk3ersoHll6IVvNkzGITe:WX81pdn95yCFZCLT6ye

Score

6^/10

Malware Config

Signatures

Checks for any installed AV software in registry 1 TTPs 1 IoCs

Security Software Discovery

T1518.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Avira	9c179490769c014d01f6865ef56a4761_JaffaCakes118.exe

Enumerates system info in registry 2 TTPs 2 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	9c179490769c014d01f6865ef56a4761_JaffaCakes118.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	9c179490769c014d01f6865ef56a4761_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\9c179490769c014d01f6865ef56a4761_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\9c179490769c014d01f6865ef56a4761_JaffaCakes118.exe"
1⤵
- Checks for any installed AV software in registry
- Enumerates system info in registry
PID:2196

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Software Discovery

T1518

Security Software Discovery

T1518.001

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2196-0-0x00000000027E0000-0x000000000290E000-memory.dmp

Filesize
1.2MB

Download
memory/2196-3-0x0000000000402000-0x0000000000403000-memory.dmp

Filesize
4KB

Download
memory/2196-2-0x00000000027E0000-0x000000000290E000-memory.dmp

Filesize
1.2MB

Download
memory/2196-6-0x0000000000400000-0x0000000000FBD000-memory.dmp

Filesize
11.7MB

Download
memory/2196-7-0x0000000000400000-0x0000000000FBD000-memory.dmp

Filesize
11.7MB

Download
memory/2196-8-0x0000000000400000-0x0000000000FBD000-memory.dmp

Filesize
11.7MB

Download
memory/2196-9-0x00000000027E0000-0x000000000290E000-memory.dmp

Filesize
1.2MB

Download