Analysis
- max time kernel
91s - max time network
124s - platform
windows10-2004_x64 - resource
win10v2004-20240611-en - resource tags
- submitted
13/06/2024, 03:07
General
- Target a3a08d9bce6d5d01db6c97252cd6af4c_JaffaCakes118.exe
- Size 538KB
- Sample240613-dmmmxsscrc
- SHA256 14f07d3691a25b42e42e75bfd606a3d8137cbdf4b47ef48f38b818d2658f4b6d
Malware Config
Signatures
- Drops startup file 1 IoCs
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\a3a08d9bce6d5d01db6c97252cd6af4c_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\a3a08d9bce6d5d01db6c97252cd6af4c_JaffaCakes118.exe"1⤵
- Drops startup file
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2128-0-0x0000000000F60000-0x0000000000F61000-memory.dmp
memory/2128-1-0x0000000000F70000-0x0000000000F72000-memory.dmp
memory/2128-2-0x0000000000F80000-0x0000000000F81000-memory.dmp
memory/2128-4-0x00000000015E0000-0x00000000015E1000-memory.dmp
memory/2128-11-0x0000000003610000-0x0000000003611000-memory.dmp
memory/2128-10-0x0000000003600000-0x0000000003601000-memory.dmp
memory/2128-8-0x00000000035E0000-0x00000000035E1000-memory.dmp
memory/2128-14-0x0000000003640000-0x0000000003641000-memory.dmp
memory/2128-13-0x0000000003630000-0x0000000003631000-memory.dmp
memory/2128-12-0x0000000003620000-0x0000000003621000-memory.dmp
memory/2128-18-0x00000000036A0000-0x00000000036A1000-memory.dmp
memory/2128-28-0x0000000001630000-0x0000000001631000-memory.dmp
memory/2128-30-0x0000000001650000-0x0000000001651000-memory.dmp
memory/2128-29-0x0000000001640000-0x0000000001641000-memory.dmp
memory/2128-27-0x0000000001620000-0x0000000001621000-memory.dmp
memory/2128-26-0x0000000003B00000-0x0000000003B01000-memory.dmp
memory/2128-25-0x00000000036B0000-0x00000000036B1000-memory.dmp
memory/2128-24-0x00000000036D0000-0x00000000036D1000-memory.dmp
memory/2128-23-0x00000000036C0000-0x00000000036C1000-memory.dmp
memory/2128-19-0x0000000003660000-0x000000000368C000-memory.dmp
memory/2128-17-0x00000000035D0000-0x00000000035D2000-memory.dmp
memory/2128-16-0x0000000003690000-0x0000000003691000-memory.dmp
memory/2128-15-0x0000000003650000-0x0000000003651000-memory.dmp
memory/2128-9-0x00000000035F0000-0x00000000035F1000-memory.dmp
memory/2128-7-0x0000000001610000-0x0000000001611000-memory.dmp
memory/2128-6-0x0000000001600000-0x0000000001601000-memory.dmp
memory/2128-5-0x00000000015F0000-0x00000000015F1000-memory.dmp
memory/2128-3-0x00000000010E0000-0x00000000010E1000-memory.dmp
memory/2128-33-0x00000000031F0000-0x00000000031F1000-memory.dmp