2bf2f2a7a285c8f422f9ec8ccc0afbd1097a776cdc5fec4804102d28d831d5df

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
20-06-2024 18:13

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

088bcfab4485f633eefdeafa30bb08be_JaffaCakes118.exe
Size

360KB
MD5

088bcfab4485f633eefdeafa30bb08be
SHA1

4e6e7ec555850015c7dec89475e26a979dfd5339
SHA256

2bf2f2a7a285c8f422f9ec8ccc0afbd1097a776cdc5fec4804102d28d831d5df
SHA512

f443e8c44bc5e11bd8497ace826bf7fbf445a3b24b8cc88be72c876e75168b81ae08062308434e24432fcfa7676f5fe5e3bce3c69384b4ad57f74fb32a78be17
SSDEEP

6144:y7zJVF4Obrxqph4s8stCLJiKxTFdQ/dmd6lyhc4NOwMWIT6YIya/lAq49dl:GJ/4ObrApys7ReT3ydm/ODWIT6YLWAqq

Score

8^/10

motw phishing

Malware Config

Signatures

Drops file in Drivers directory 2 IoCs

Processes:

088bcfab4485f633eefdeafa30bb08be_JaffaCakes118.exe

description	ioc	process
File opened for modification	C:\WINDOWS\system32\drivers\etc\host	088bcfab4485f633eefdeafa30bb08be_JaffaCakes118.exe
File created	C:\WINDOWS\system32\drivers\etc\host	088bcfab4485f633eefdeafa30bb08be_JaffaCakes118.exe

Mark of the Web detected: This indicates that the page was originally saved or cloned. 37 IoCs

phishing motw

Processes:

flow	ioc
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html
6	https://jira.ops.aol.com/secure/attachment/688199/failwhale.html

C:\Users\Admin\AppData\Local\Temp\088bcfab4485f633eefdeafa30bb08be_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\088bcfab4485f633eefdeafa30bb08be_JaffaCakes118.exe"
1⤵
- Drops file in Drivers directory
PID:3408

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\AKI8W8FH\F891IUSO.htm
Filesize
530KB

MD5
a3cadbc046197cc28f770fd4a19ae958

SHA1
593bb056731a368b7a88eac41e40f8996acd6ea3

SHA256
5591e21b63a1a249237502e337e9c4559568ce56d0a73fb7afa421f54b4584d7

SHA512
1436d22c554a7d1f92265dad18ae577aa5c483870d8f5bd5bfb66ceca35d214059281b8bbe04fc6e278ab40ecd621e68270ffc08821e48ce8188d61e24ee7cab

Download Submit
memory/3408-0-0x00000000021F0000-0x00000000021F1000-memory.dmp

Filesize
4KB

Download
memory/3408-18-0x0000000000400000-0x0000000000460000-memory.dmp

Filesize
384KB

Download
memory/3408-36-0x00000000021F0000-0x00000000021F1000-memory.dmp

Filesize
4KB

Download