146702f706ed6d66d5e4bbcda5be18439c68ba59580c7310c703d326307e07bc

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
14/06/2024, 05:56

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a839a77cabe80cc2b45d0167cd878180_JaffaCakes118.exe
Size

287KB
MD5

a839a77cabe80cc2b45d0167cd878180
SHA1

31a58e463b7cac05c71784e9a2483930ea123234
SHA256

146702f706ed6d66d5e4bbcda5be18439c68ba59580c7310c703d326307e07bc
SHA512

873016c709ed55fd8ff143c2e67881d966821154f857ed11428164333d1301ce9ce2c0580e0876573ce1beeb20601a9889084d6456f16ba6cffc6c7e547167d4
SSDEEP

6144:/5INjuL/qKE2ubO8Rk9wlA2hWNagPvHjKEAO:R6w/q1Nk9SA24agP/GEAO

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\GrabABite.job	a839a77cabe80cc2b45d0167cd878180_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\a839a77cabe80cc2b45d0167cd878180_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\a839a77cabe80cc2b45d0167cd878180_JaffaCakes118.exe"
1⤵
- Drops file in Windows directory
PID:2220

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2220-1-0x0000000000940000-0x0000000000980000-memory.dmp

Filesize
256KB

Download
memory/2220-2-0x00000000000F0000-0x000000000011F000-memory.dmp

Filesize
188KB

Download
memory/2220-15-0x0000000000940000-0x0000000000980000-memory.dmp

Filesize
256KB

Download