Analysis
-
max time kernel
141s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
20/06/2024, 14:40
General
-
Target
06e97910a3b0c0cc9b39dd180534592e_JaffaCakes118.exe
-
Size
48KB
-
MD5
06e97910a3b0c0cc9b39dd180534592e
-
SHA1
db8295afe382a2de94d0f11b810fc402ee9ffb17
-
SHA256
5dace3d59328047ee072c250a963070e215ee10e087dae07b6bbb7e867d19a80
-
SHA512
4215b09c7eef25095c49e91e6bece234cf009a2f2027b4a0243c8b9d7b965753de623a7a91861d892817cdb9b323943de418e4e0e345273ac43a7677d750e036
-
SSDEEP
768:thsbFwx3FPlSPwF8tLBs5tc6Eq2mMLjHxYEuSIDQuxZx/FAw3Iym6zGskWxemel:tGb6llSP3eaFRmBvA0lTkMe
Score
7/10
Malware Config
Signatures
-
Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\06e97910a3b0c0cc9b39dd180534592e_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\06e97910a3b0c0cc9b39dd180534592e_JaffaCakes118.exe"1⤵
- Checks BIOS information in registry
- Adds Run key to start application
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
16KB
-
Filesize
60KB