Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    14/06/2024, 18:06

General

  • Target

    ab0bbf306cf751293c452ab17bdb589c_JaffaCakes118.exe

  • Size

    226KB

  • MD5

    ab0bbf306cf751293c452ab17bdb589c

  • SHA1

    a5bdf5341c3b052b83a40b6ce15d03295b049116

  • SHA256

    20c83af0d5fc273356077a23cbe7490a6a570ab19db4859e72cb27bf3b3102f4

  • SHA512

    9782d88f2b38035c692f0cae4ad60b1359591b00847e751a1c53722228873555a144b9715e7eed90df4e59fa4eb9380b87eb327a4262fab2ff7719b9eb4483ec

  • SSDEEP

    3072:B3q1DOqzYNUyT57MAQGZV8gKHAkh6CtRqcQ2cjSTdH0Y42Esb:B3qtJ8UyT5rggnCtgLHsH0Y42Eu

Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ab0bbf306cf751293c452ab17bdb589c_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\ab0bbf306cf751293c452ab17bdb589c_JaffaCakes118.exe"
    1⤵
    • Drops file in Windows directory
    PID:1244

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1244-0-0x0000000000020000-0x0000000000021000-memory.dmp

    Filesize

    4KB

  • memory/1244-1-0x0000000000030000-0x0000000000031000-memory.dmp

    Filesize

    4KB

  • memory/1244-2-0x00000000000F0000-0x00000000000F1000-memory.dmp

    Filesize

    4KB

  • memory/1244-4-0x0000000000110000-0x0000000000111000-memory.dmp

    Filesize

    4KB

  • memory/1244-3-0x0000000000100000-0x0000000000101000-memory.dmp

    Filesize

    4KB

  • memory/1244-5-0x0000000000120000-0x0000000000140000-memory.dmp

    Filesize

    128KB

  • memory/1244-10-0x0000000000120000-0x0000000000140000-memory.dmp

    Filesize

    128KB

  • memory/1244-6-0x0000000000160000-0x000000000018F000-memory.dmp

    Filesize

    188KB

  • memory/1244-18-0x0000000000120000-0x0000000000140000-memory.dmp

    Filesize

    128KB