22989e1801c318a041cc04a2b7ec0bcf727d6848d83024e75452e4066a07b6e5

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
14/06/2024, 01:46

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a79ae707a5428197e81f48f50c8eb9ca_JaffaCakes118.exe
Size

222KB
MD5

a79ae707a5428197e81f48f50c8eb9ca
SHA1

4e66861dcd0f98cb66544c3993a9e0c6ccee4559
SHA256

22989e1801c318a041cc04a2b7ec0bcf727d6848d83024e75452e4066a07b6e5
SHA512

1bd5b4fec7bfe3924d989f7f482bd83d7804f5cd0a9c6e559bd0c6b99a7c75d8c1fbb31e9435762ab2c116fd99ce2148395a3330c69f29514e016631694b2887
SSDEEP

3072:Z+SqGqm2PvXhNAI+NmlHE0O62IvxszK8JhIkPEAVrHcpIMJJArC6y5I:Z+SqGqdxNAJTIPOhXEAp9wsC6yy

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\TechnoEffects.job	a79ae707a5428197e81f48f50c8eb9ca_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\a79ae707a5428197e81f48f50c8eb9ca_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\a79ae707a5428197e81f48f50c8eb9ca_JaffaCakes118.exe"
1⤵
- Drops file in Windows directory
PID:2372

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2372-1-0x0000000000030000-0x0000000000031000-memory.dmp

Filesize
4KB

Download
memory/2372-0-0x0000000000020000-0x0000000000021000-memory.dmp

Filesize
4KB

Download
memory/2372-2-0x0000000000080000-0x0000000000081000-memory.dmp

Filesize
4KB

Download
memory/2372-3-0x00000000000A0000-0x00000000000C0000-memory.dmp

Filesize
128KB

Download
memory/2372-4-0x0000000000090000-0x0000000000091000-memory.dmp

Filesize
4KB

Download
memory/2372-9-0x00000000000A0000-0x00000000000C0000-memory.dmp

Filesize
128KB

Download
memory/2372-5-0x0000000000120000-0x000000000014F000-memory.dmp

Filesize
188KB

Download
memory/2372-17-0x00000000000A0000-0x00000000000C0000-memory.dmp

Filesize
128KB

Download