Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11-06-2024 13:38

General

  • Target

    9e5e5ee50dd7e2cfbff72cb411971ecb_JaffaCakes118.exe

  • Size

    727KB

  • MD5

    9e5e5ee50dd7e2cfbff72cb411971ecb

  • SHA1

    f8d3ca8c38ec5f201a5921e3e49341075f3ba39f

  • SHA256

    51073eaa2aa0772c54498faa1e23cc78a7920c4745d8a3cb34ffc4d775202a7f

  • SHA512

    d9db8825795ce5cc16657bc628e3ff58e42b84b200f71b5d9692dda9929782b94c78917ddfec6cc162de83b1f390e8eba7e7c22d9214025c22b36f7bc337b0c0

  • SSDEEP

    12288:rwECaUglPnFsk7P0UahDyDT1eBRXjIjp0TMir:rwEC70qkgUahDuQRf

Score
6/10

Malware Config

Signatures

  • Enumerates connected drives 3 TTPs 21 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\9e5e5ee50dd7e2cfbff72cb411971ecb_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\9e5e5ee50dd7e2cfbff72cb411971ecb_JaffaCakes118.exe"
    1⤵
    • Enumerates connected drives
    • Writes to the Master Boot Record (MBR)
    PID:4896

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4896-0-0x0000000000400000-0x00000000004BA000-memory.dmp

    Filesize

    744KB