Analysis
-
max time kernel
140s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
20-06-2024 13:51
Behavioral task
behavioral1
Sample
0695aac143ae207ce033929b0ca9888d_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0695aac143ae207ce033929b0ca9888d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0695aac143ae207ce033929b0ca9888d_JaffaCakes118.exe
-
Size
307KB
-
MD5
0695aac143ae207ce033929b0ca9888d
-
SHA1
995c914c94f455b99d1b6d098ab913ff7fb13f10
-
SHA256
1b1226815d7f638d98c79caae4625ad5664f3882685c42c918bf838e36cc758f
-
SHA512
17b3e4a2b09b854be520479adb6b819d1c1cae81a0d59392dc29117cfedb25c11e6008c350ff4baf83f6f806eeb6c9958fe3138f0b25b749f2bf09faeb6b2fdb
-
SSDEEP
6144:gNKIK84tmzVZMrRhZf4th8Hjh+ixKLSMGk:B84tmzgrlMhCjh+XGk
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1736-0-0x0000000000400000-0x00000000004B7000-memory.dmp upx behavioral1/memory/1736-56-0x0000000000400000-0x00000000004B7000-memory.dmp upx behavioral1/memory/1736-62-0x0000000000400000-0x00000000004B7000-memory.dmp upx -
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PhysicalDrive0 0695aac143ae207ce033929b0ca9888d_JaffaCakes118.exe -
Drops file in Program Files directory 1 IoCs
description ioc Process File opened for modification C:\Program Files (x86)\SAItest.txt 0695aac143ae207ce033929b0ca9888d_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
67KB
MD52d3dcf90f6c99f47e7593ea250c9e749
SHA151be82be4a272669983313565b4940d4b1385237
SHA2568714e7be9f9b6de26673d9d09bd4c9f41b1b27ae10b1d56a7ad83abd7430ebd4
SHA5129c11dd7d448ffebe2167acde37be77d42175edacf5aaf6fb31d3bdfe6bb1f63f5fdbc9a0a2125ed9d5ce0529b6b548818c8021532e1ea6b324717cc9bec0aaa5
-
Filesize
160KB
MD57186ad693b8ad9444401bd9bcd2217c2
SHA15c28ca10a650f6026b0df4737078fa4197f3bac1
SHA2569a71fa0cb44aa51412b16a0bf83a275977ba4e807d022f78364338b99b3a3eed
SHA512135be0e6370fd057762c56149526f46bf6a62fb65ef5b3b26ae01fa07b4c4e37188e203bd3812f31e260ec5cccff5924633dd55ab17e9fa106479783c2fb212b