Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
-
submitted
20/06/2024, 17:18
General
-
Target
08260d432e7b69bf909b79c97130a855_JaffaCakes118.exe
-
Size
852KB
-
MD5
08260d432e7b69bf909b79c97130a855
-
SHA1
cbb59ffbaadb7b0a0a8aad48341d0b12b5e74897
-
SHA256
5c65d765e62ac825aa6d0c96101aa866231635557e74a418e8ce552354eacba2
-
SHA512
e43bb30dad96f94db31cd573bdd83b107dd11512c6732713fe4812951b9e476e6170d4375b297e44a1c6d499e44b4a4721c0303d5ad002bf59de082f766456e2
-
SSDEEP
24576:FvpKfMmr1tJsnr1o10oocLfoXjQmXrNPI:FQbJsr1yqcLAEmBPI
Malware Config
Signatures
-
ASPack v2.12-2.42 1 IoCs
Detects executables packed with ASPack v2.12-2.42
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\08260d432e7b69bf909b79c97130a855_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\08260d432e7b69bf909b79c97130a855_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Adds Run key to start application
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\ÎÒµÄÕÕƬ.exeC:\Users\Admin\AppData\Local\Temp\IXP000.TMP\ÎÒµÄÕÕƬ.exe2⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
423KB
MD5f59793c00c677cb60a90da4c33346b03
SHA1d07f436a587afe53f0582c557b1ec99cecc46333
SHA2567e34d7df594cf502b77c194bd075f8c86ea33e947553966723f04dae6e82479a
SHA5125f2fcdd007deeba4cf2215d4f165dd6370d6782f31f86adf5aa7008d1b040d69a3a837492b9b2f572b1f029a02f487457afa276b4065c3a225fed591a2935f04
-
Filesize
1.8MB
-
Filesize
336KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
1.8MB
-
Filesize
336KB
-
Filesize
952KB