Analysis
-
max time kernel
51s -
max time network
51s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
20-06-2024 10:37
General
-
Target
0533b69d741773439f14d7808e58c559_JaffaCakes118.exe
-
Size
685KB
-
MD5
0533b69d741773439f14d7808e58c559
-
SHA1
0e18afa8cb2f24798fdb1651d71d19b42d40e744
-
SHA256
4a408a2e04873171627e27a9a20104897532a89047a9270e74f1f093a58d96dc
-
SHA512
c83c4449b8bca37804b0ff4b4c9b4cfb0b41c9283d378ab425e3ce1144821f82c8421525df32eb525a80ecb2b3f95ef46016bf76e6870d4275e44ebcd4266159
-
SSDEEP
12288:YQBB+PpV8eiQIHprnZb27VNLpHGgmzkF3Z4mxxGtBfuTGKExGRZSon:YRviNHFnZyR3Hk4QmXimTkID
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0533b69d741773439f14d7808e58c559_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0533b69d741773439f14d7808e58c559_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\1433.exeC:\Users\Admin\AppData\Local\Temp\IXP000.TMP\1433.exe2⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
743KB
MD5b16487f2584769da1fb7c3f210fb67b2
SHA195b5636d918db5d6ba2afea0faeb1ace661fa330
SHA256f55dc032720027c7a18e346471b01294f145ec8935a62dc9902d8548ad2eb42d
SHA5122201fc766ca8ac3b689377c15373e3fc3dae98b6ca0d14bfd7a1e2e68f964361c9495f5f8b8afe283f8be9f44e0ea189e07328677ad26ba39d6e008afbbdf2d5
-
Filesize
1.1MB
-
Filesize
336KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
336KB
-
Filesize
1.1MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB