Analysis
- max time kernel
150s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20240611-en - resource tags
- submitted
17/06/2024, 02:53
General
- Target b672f097aa9097d9e0228195714cbbbc_JaffaCakes118.exe
- Size 370KB
- Sample240617-ddgejs1cme
- SHA256 ef79a7a925060b092913b3bd3e1e5fc7ca39e287a0910c985354bc8f9a608f49
Malware Config
Signatures
- Drops startup file 1 IoCs
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\b672f097aa9097d9e0228195714cbbbc_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b672f097aa9097d9e0228195714cbbbc_JaffaCakes118.exe"1⤵
- Drops startup file
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2916-0-0x0000000000CF0000-0x0000000000CF1000-memory.dmp
memory/2916-1-0x0000000000D00000-0x0000000000D02000-memory.dmp
memory/2916-2-0x0000000000D10000-0x0000000000D11000-memory.dmp
memory/2916-14-0x0000000001460000-0x0000000001462000-memory.dmp
memory/2916-22-0x0000000003AA0000-0x0000000003AA1000-memory.dmp
memory/2916-21-0x0000000003A10000-0x0000000003A11000-memory.dmp
memory/2916-20-0x0000000003A50000-0x0000000003A51000-memory.dmp
memory/2916-19-0x0000000003A40000-0x0000000003A41000-memory.dmp
memory/2916-16-0x00000000039F0000-0x00000000039F1000-memory.dmp
memory/2916-15-0x0000000003A00000-0x0000000003A01000-memory.dmp
memory/2916-13-0x00000000039E0000-0x00000000039E1000-memory.dmp
memory/2916-12-0x00000000039D0000-0x00000000039D1000-memory.dmp
memory/2916-11-0x00000000039C0000-0x00000000039C1000-memory.dmp
memory/2916-10-0x0000000001BD0000-0x0000000001BD1000-memory.dmp
memory/2916-9-0x0000000001BC0000-0x0000000001BC1000-memory.dmp
memory/2916-8-0x0000000001BB0000-0x0000000001BB1000-memory.dmp
memory/2916-7-0x0000000001410000-0x0000000001411000-memory.dmp
memory/2916-18-0x0000000003A30000-0x0000000003A31000-memory.dmp
memory/2916-17-0x0000000003A20000-0x0000000003A21000-memory.dmp
memory/2916-6-0x0000000001400000-0x0000000001401000-memory.dmp
memory/2916-5-0x00000000013F0000-0x00000000013F1000-memory.dmp
memory/2916-4-0x00000000013E0000-0x00000000013E1000-memory.dmp
memory/2916-3-0x0000000000DE0000-0x0000000000DE1000-memory.dmp
memory/2916-24-0x0000000003A90000-0x0000000003A91000-memory.dmp
memory/2916-25-0x0000000003A60000-0x0000000003A8C000-memory.dmp
memory/2916-23-0x0000000003AB0000-0x0000000003AB1000-memory.dmp
memory/2916-32-0x0000000003E20000-0x0000000003E21000-memory.dmp
memory/2916-31-0x0000000003AC0000-0x0000000003AC1000-memory.dmp