5c5d29fd5d2702e9ffe649c1958e3d892b3006f674d9c22fab4ad5e94d9b4d23

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
14-06-2024 06:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a84e7559b240f860c44806f972f4a140_JaffaCakes118.exe
Size

184KB
MD5

a84e7559b240f860c44806f972f4a140
SHA1

a74088e5b31a3c4cd3665e675ad3bdfbff0288e3
SHA256

5c5d29fd5d2702e9ffe649c1958e3d892b3006f674d9c22fab4ad5e94d9b4d23
SHA512

785176d2bf2bfafd2c43fa473b23e70767cbce7f5efee2c101080e56678ba950efc2036d431ffaf083ca188dce3ffe8ba717d3dc3f1dd49635288deb98688932
SSDEEP

3072:DGjz+zscU98hxkacQlZjEEZrCTBpwWUxjWYPJmSPJKHo56+B3ZPaEtkNnEXUVLgM:D2z+WKxkAlZjEiCTByTjWYPUqso5XpPW

Score

6^/10

persistence

Malware Config

Signatures

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\FEBBC6272832 = "C:\\Users\\Admin\\AppData\\Local\\Temp\\a84e7559b240f860c44806f972f4a140_JaffaCakes118.exe"	a84e7559b240f860c44806f972f4a140_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\a84e7559b240f860c44806f972f4a140_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\a84e7559b240f860c44806f972f4a140_JaffaCakes118.exe"
1⤵
- Adds Run key to start application
PID:1724

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1724-0-0x0000000000400000-0x000000000046A000-memory.dmp

Filesize
424KB

Download
memory/1724-1-0x0000000000400000-0x000000000046A000-memory.dmp

Filesize
424KB

Download
memory/1724-2-0x0000000000400000-0x000000000046A000-memory.dmp

Filesize
424KB

Download
memory/1724-3-0x00000000002C0000-0x00000000002C3000-memory.dmp

Filesize
12KB

Download
memory/1724-4-0x0000000000400000-0x000000000046A000-memory.dmp

Filesize
424KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads