2040813c4de23b63e7291c7a42f6ade12788f41f3dc01fe43cb4001a7d8d7ab7

Analysis

max time kernel
145s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
14/06/2024, 20:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

ab377b3a6ec8a9fea9cfaa256a4540ef_JaffaCakes118.exe
Size

474KB
MD5

ab377b3a6ec8a9fea9cfaa256a4540ef
SHA1

4df1f4db0f601d8c18721c6436c852739b62f315
SHA256

2040813c4de23b63e7291c7a42f6ade12788f41f3dc01fe43cb4001a7d8d7ab7
SHA512

34c9c6f3bb99826dc261b3ff5559352742b8f97a4a7e4374156dcc60116da791188508f41c837936ed58893a891e4e57f51ece11f678655420e3e48cbea7277e
SSDEEP

6144:/pS9elXvTyzORwQWQfAbr9Gg4sfdB1zDeWvDD0UFK36lPqEbIGrzGZA2D9Be52cW:/pS9ibyR9QfAoPslPzfXxFgAXW2itJ

Score

7^/10

Malware Config

Signatures

Drops startup file 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ab377b3a6ec8a9fea9cfaa256a4540ef_JaffaCakes118.lnk	ab377b3a6ec8a9fea9cfaa256a4540ef_JaffaCakes118.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\ab377b3a6ec8a9fea9cfaa256a4540ef_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\ab377b3a6ec8a9fea9cfaa256a4540ef_JaffaCakes118.exe"
1⤵
- Drops startup file
PID:4912

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4104,i,11746347647270949551,7786733067759450703,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:8
1⤵
PID:3644

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4912-0-0x00000000013E0000-0x00000000013E2000-memory.dmp

Filesize
8KB

Download
memory/4912-1-0x00000000013F0000-0x00000000013F1000-memory.dmp

Filesize
4KB

Download
memory/4912-14-0x00000000015F0000-0x00000000015F1000-memory.dmp

Filesize
4KB

Download
memory/4912-13-0x00000000015E0000-0x00000000015E1000-memory.dmp

Filesize
4KB

Download
memory/4912-12-0x00000000015D0000-0x00000000015D1000-memory.dmp

Filesize
4KB

Download
memory/4912-11-0x00000000015C0000-0x00000000015C1000-memory.dmp

Filesize
4KB

Download
memory/4912-10-0x00000000015B0000-0x00000000015B1000-memory.dmp

Filesize
4KB

Download
memory/4912-9-0x00000000015A0000-0x00000000015A1000-memory.dmp

Filesize
4KB

Download
memory/4912-8-0x0000000001590000-0x0000000001591000-memory.dmp

Filesize
4KB

Download
memory/4912-7-0x0000000001580000-0x0000000001581000-memory.dmp

Filesize
4KB

Download
memory/4912-6-0x0000000001520000-0x0000000001521000-memory.dmp

Filesize
4KB

Download
memory/4912-5-0x0000000001510000-0x0000000001511000-memory.dmp

Filesize
4KB

Download
memory/4912-4-0x0000000001500000-0x0000000001501000-memory.dmp

Filesize
4KB

Download
memory/4912-3-0x00000000014F0000-0x00000000014F1000-memory.dmp

Filesize
4KB

Download
memory/4912-2-0x00000000014D0000-0x00000000014D1000-memory.dmp

Filesize
4KB

Download
memory/4912-23-0x0000000003AB0000-0x0000000003AB1000-memory.dmp

Filesize
4KB

Download
memory/4912-30-0x00000000036D0000-0x00000000036D1000-memory.dmp

Filesize
4KB

Download
memory/4912-29-0x00000000036C0000-0x00000000036C1000-memory.dmp

Filesize
4KB

Download
memory/4912-28-0x0000000001560000-0x0000000001561000-memory.dmp

Filesize
4KB

Download
memory/4912-27-0x0000000001550000-0x0000000001551000-memory.dmp

Filesize
4KB

Download
memory/4912-26-0x0000000001540000-0x0000000001541000-memory.dmp

Filesize
4KB

Download
memory/4912-25-0x0000000001530000-0x0000000001531000-memory.dmp

Filesize
4KB

Download
memory/4912-24-0x0000000001640000-0x0000000001641000-memory.dmp

Filesize
4KB

Download
memory/4912-15-0x0000000001600000-0x0000000001626000-memory.dmp

Filesize
152KB

Download
memory/4912-22-0x0000000003AA0000-0x0000000003AA1000-memory.dmp

Filesize
4KB

Download
memory/4912-21-0x0000000001650000-0x0000000001651000-memory.dmp

Filesize
4KB

Download
memory/4912-20-0x0000000001570000-0x0000000001572000-memory.dmp

Filesize
8KB

Download
memory/4912-19-0x0000000001630000-0x0000000001631000-memory.dmp

Filesize
4KB

Download
memory/4912-36-0x00000000036E0000-0x00000000036E1000-memory.dmp

Filesize
4KB

Download