Analysis
- max time kernel
147s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system - submitted
11/06/2024, 09:52
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
2 signatures
150 seconds
General
- Target 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe
- Size 166KB
- Sample240611-lv78lasepd
- SHA256 9cfdf4cdac66a42523e603131323f7822b3077a7ee66ece6f6cfaf37554e4fdf
- MD5 9dc42fd5bca17550a62304f5e81bcd8d
- SHA1 cd4f2cd540e74ea11e7def88bc305ef24b2508f9
- SHA512 ba91ff15c513fc5792200986f9e891d6bc6249c722396b4b8e266323b40c2cac8ac2349c424ead1f09c52becd3307ad3fe2b65e692a52bbe1bbe6a6ad3c3a935
- SSDEEP 3072:jmVW8iTX/3RfldjjXq1+0cxxsWEL02fXcIp08MoeGYivP0b:aM7jJlRexYTHYZMGYivY
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe = "C:\\Windows\\system32\\winxcfg.exe" 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe - Drops file in System32 directory 33 IoCs
description ioc Process File created C:\Windows\SysWOW64\macromd\horny housewife looking for some action.mpg.pif 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\DivX pro key generator.exe 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\Microsoft Office XP (english) key generator.exe 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\GTA3 crack.exe 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\gorgious babe who quit school to model pretty pink.mpg.pif 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\brunette fucking in bedroom with boyfriend.mpg.pif 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe File created C:\Windows\SysWOW64\winxcfg.exe 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\Play Games Online For FREE.exe 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\ass ripping interracial fuckin.mpg.pif 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\sexy hot looking horny ebony teens.mpg.pif 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\young slut being pound in all her tight holes.mpg.pif 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\babe locking lips around her man's rod in backyard.mpg.pif 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\horny teen waking up with her pink pussy spread.mpg.pif 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\cutie nailed up the ass.mpg.pif 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\petite ebony enjoying her joy toy.mpg.pif 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\both holes fucked by a massive fucking machin.mpg.pif 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\girls with cock in hand and mouths fill with cum .mpg.pif 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\Pamela Anderson And Tommy Lee Home Video (Part 1).mpg.exe 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\aol password cracker.exe 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\AOL.exe 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\hotmail account sniffer.exe 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\illegal preteen porn anal fisting.mpg.pif 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\teen spreading in the kitchen.mpg.pif 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\siemens unlocker.exe 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\stud fucking his blonde french maid.mpg.pif 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\busty asian with big lips.mpg.pif 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\pornstar aria giovanni .mpg.pif 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\spying on gals in toilet.mpg.pif 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\polish naturals with nice round titties.mpg.pif 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\hard 3 way fuck in car shop.mpg.pif 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\kinky banana in pussy.mpg.pif 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\MSN Password Hacker and Stealer.exe 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\babes getting facials and riding cocks.mpg.pif 9dc42fd5bca17550a62304f5e81bcd8d_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Windows\SysWOW64\macromd\aol password cracker.exe
- Size 92KB
- SHA256 250384c4ece744afdf01e9136bcae2d3ce31b5f4fb6e20b52bec623ebe966732
- MD5 2e05a27e332330b62df1076242cf3c06
- SHA1 e936e4bf5fb909a30b53d545fa1137735e45cd2a
- SHA512 25143ddc4110be9347a5aaad769923e3fb0bf11fd6796e60030187e05788e8c906077942bff1312f4b7fd4845b1088bc941ab8aef35ec46223d8bfed26cc1efb
- SSDEEP 1536:wAiqYVsMe80ZTy0/rwENpf9fGATpdjjDDfzfpc4o10/LRJEI/8p5:jmVW8iTX/3RfldjjDDf1HzEIi5
- MD5 SHA1 SHA512 SSDEEP