Analysis
- max time kernel
147s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system - submitted
13/06/2024, 13:14
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe
Resource
win7-20240508-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
2 signatures
150 seconds
General
- Target a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe
- Size 147KB
- Sample240613-qgscfavaml
- SHA256 7927b8b7cd9374d634cd8568f603c8064b4e129761ed69fb06d1a73c6848d78c
- MD5 a5b933a6c35db6c7e85015b8a6e70565
- SHA1 bf4d6556f30a221ed5c0506807ecb317a1c03beb
- SHA512 49db45c5efb1deffec690bc9ded2a7745cf531e6724f2481a9ecda781b2f013dcde88a8fc0cc0d8672b6d6711de1cb78dc78dabe59079215591ce37e4470c800
- SSDEEP 3072:jmVW8iTX/3RfldjjXq1+0cxxsWEL02fXcIp08Moe6rfum:aM7jJlRexYTHYZM6im
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe = "C:\\Windows\\system32\\winxcfg.exe" a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe - Drops file in System32 directory 32 IoCs
description ioc Process File created C:\Windows\SysWOW64\macromd\aol password cracker.exe a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\petite ebony enjoying her joy toy.mpg.pif a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\sylvia lauren showing her assets.mpg.pif a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\cum hungry teen in action.mpg.pif a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\pamela anderson naked.mpg.exe a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\busty babe on a balcony.mpg.pif a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe File created C:\Windows\SysWOW64\winxcfg.exe a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\jenna jameson - shower scene.exe a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\hard cock cumming in her mouth.mpg.pif a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\nymph enjoys fisting all the way to the elbow.mpg.pif a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\cute blonde chick riding cock.mpg.pif a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\jenna jameson - xxx nurse scene.mpg.pif a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\wild stud eating and drilling small pussy freek.mpg.pif a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\pornstar aria giovanni .mpg.pif a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\large lesbo sluts in bondage.mpg.pif a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\hot blonde with giant jugs.mpg.pif a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\Microsoft Office XP (english) key generator.exe a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\12 year old forced rape cum.exe a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\sluts who are in control of their slaves.mpg.pif a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\happy babe who got 12 inches last night.mpg.pif a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\leggy babe posing in pink panties.mpg.pif a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\naturaly tan babe with gorgous body.mpg.pif a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\firm ass honie with thick lips made for sucking rods.mpg.pif a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\slut mouth open wide to take dick in.mpg.pif a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\cunt licking in pool.mpg.pif a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\brownhair toon with glasses nude.mpg.pif a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\yahoo hacker.exe a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\3 teen blonde babes chin deep in pussy sauce.mpg.pif a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\asian slut with puffy exotic lips.mpg.pif a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\blowjob girl getting a sloppy facial.mpg.pif a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\nasty brunette getting hard jolting.mpg.pif a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe File created C:\Windows\SysWOW64\macromd\busty babe in lingerie.mpg.pif a5b933a6c35db6c7e85015b8a6e70565_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Windows\SysWOW64\macromd\aol password cracker.exe
- Size 73KB
- SHA256 62de457883b788d794eb0d24a80269ebd00c6ce87dac69132b9856ae36fc2dfb
- MD5 ff2689da546abda0eeddda8c8d155738
- SHA1 2484a99acaf2b2039eda2dd12af10083144387fd
- SHA512 4ee520dd5d48e1f2ba4026eebb4cefc5abd0963f6b7c3101b4adfe8487983833e93d28b1b9d73414fa0bc9ceee906fb30a3476528a30dc140096a6635c1032c7
- SSDEEP 1536:wAiqYVsMe80ZTy0/rwENpf9fGATpdjjmEyynT0kLtBx:jmVW8iTX/3Rfldjj1y00Wjx
- MD5 SHA1 SHA512 SSDEEP