Analysis

  • max time kernel
    144s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    16-06-2024 18:50

General

  • Target

    b4a9776a5f0148d62e8d6bae641e3f1a_JaffaCakes118.exe

  • Size

    509KB

  • MD5

    b4a9776a5f0148d62e8d6bae641e3f1a

  • SHA1

    2fc0e7db7f1976598207085116d96892274d02d6

  • SHA256

    06402f7efc7118db595507cec9188ea60792d76aa9da3ecfff4cf44123f436a2

  • SHA512

    802aaa7eecf3810ea8014269c2c7bf554aa954a31b952d76ac3f74fc6b4070567faee093aee1aae9043381ea5510281ae5f970687234288077bbd2f6dd61f535

  • SSDEEP

    12288:cZSayd0ipruR8qjP1FFFOOzhEYkFLGqBEW+K:cZ2prunLXFFO1FLGqK9K

Score
6/10

Malware Config

Signatures

  • Enumerates connected drives 3 TTPs 21 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\b4a9776a5f0148d62e8d6bae641e3f1a_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\b4a9776a5f0148d62e8d6bae641e3f1a_JaffaCakes118.exe"
    1⤵
    • Enumerates connected drives
    • Writes to the Master Boot Record (MBR)
    PID:2236

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2236-0-0x0000000000400000-0x0000000000484000-memory.dmp

    Filesize

    528KB