b4b6dbb3ecdc1bdee39a84b614f14e5f79f9e3cc982b0dbd82ca4b8b04b6888f

Analysis

max time kernel
140s
max time network
51s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
20/06/2024, 15:39

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

075fbaa89291936358b8889c707635b9_JaffaCakes118.exe
Size

637KB
MD5

075fbaa89291936358b8889c707635b9
SHA1

9826632fce9de7f22b9b1e44bd59d2a88bba414b
SHA256

b4b6dbb3ecdc1bdee39a84b614f14e5f79f9e3cc982b0dbd82ca4b8b04b6888f
SHA512

4e5f04c264a9a37f1af6b5f32a18bb0ee87602f25f53d3b53a83f5a52a98cb2adb24f08cb74bb2d95f73eeccadfce48a2b0207aa1f7df70eaacacd020604e0fb
SSDEEP

12288:AJB4/S0EMhfSnXadZ72nWMamQbyMH0ZCzgHKzLZ39oB:AJCtfG0ZCWbm0UZCUH6+

Score

6^/10

persistence

Malware Config

Signatures

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\C:\Arquivos de programas\HPA\hpa.exe = "C:\\Arquivos de programas\\HPA\\hpa.exe"	075fbaa89291936358b8889c707635b9_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\075fbaa89291936358b8889c707635b9_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\075fbaa89291936358b8889c707635b9_JaffaCakes118.exe"
1⤵
- Adds Run key to start application
PID:3664

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3664-0-0x0000000002210000-0x0000000002211000-memory.dmp

Filesize
4KB

Download
memory/3664-1-0x0000000000400000-0x00000000004A8000-memory.dmp

Filesize
672KB

Download
memory/3664-2-0x0000000000400000-0x00000000004A8000-memory.dmp

Filesize
672KB

Download
memory/3664-3-0x0000000002210000-0x0000000002211000-memory.dmp

Filesize
4KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads