Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    12/06/2024, 22:55

General

  • Target

    a2ce5a73ea2d54fdd4e9a5129f39d8fe_JaffaCakes118.exe

  • Size

    85KB

  • MD5

    a2ce5a73ea2d54fdd4e9a5129f39d8fe

  • SHA1

    433c6d8322db270b3a677b3c46ecc518636f99b2

  • SHA256

    06e187ee90ec1e32e8e0bb61a7f806a92dabe74d104a11b5b927c1bd23847524

  • SHA512

    53fdce94128898a3d3efa7481f61f399f62fe4a5f302c6a59f1b63b22dde16c7278e3166d9eb16c9b71e4b327b8540d46eda24451fc3b24631c19f4b5b6f662b

  • SSDEEP

    1536:fCaIoX1oYOcbTMV88TXJLE7iwhKKS2gE2wGu3SzR3:fCaZ2Yrb0VTXJY7iZKUE2wGuih

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\a2ce5a73ea2d54fdd4e9a5129f39d8fe_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\a2ce5a73ea2d54fdd4e9a5129f39d8fe_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    PID:2296

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\nst1028.tmp\System.dll

    Filesize

    11KB

    MD5

    960a5c48e25cf2bca332e74e11d825c9

    SHA1

    da35c6816ace5daf4c6c1d57b93b09a82ecdc876

    SHA256

    484f8e9f194ed9016274ef3672b2c52ed5f574fb71d3884edf3c222b758a75a2

    SHA512

    cc450179e2d0d56aee2ccf8163d3882978c4e9c1aa3d3a95875fe9ba9831e07ddfd377111dc67f801fa53b6f468a418f086f1de7c71e0a5b634e1ae2a67cd3da

  • \Users\Admin\AppData\Local\Temp\nst1028.tmp\nsisdl.dll

    Filesize

    14KB

    MD5

    a5a4cee2eb89d2687c05ef74299f0dba

    SHA1

    b9bff5987be422887f2f402357b47db2288a1a42

    SHA256

    cb82268b778703db75961cddef33a695a674f0dfd28b7e710b198ef2d26d3963

    SHA512

    f485267c6239f84d294ed4b0a82f317081e6e2e0c5613bd012bbd496b9ebccb8aca6944e80f84af51d17ac13f4d83480c34edfe37a3a9508ce0e67fc9f0b96f0