Analysis

  • max time kernel
    142s
  • max time network
    124s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27-06-2024 13:07

General

  • Target

    161d0337a809cd1589a6b3560d4974d5_JaffaCakes118.exe

  • Size

    1.0MB

  • MD5

    161d0337a809cd1589a6b3560d4974d5

  • SHA1

    525ef06fe21854f891e0ac43332e71eb31c18cc3

  • SHA256

    86eaed5bfb01c116c54275f16e225af375c901ee4ff9998a9ae0e3b88ab1874e

  • SHA512

    ef0442d2e75f41b3a99a95358121a23ddd1d4b0d8a9df52145da3ee369938428929a73112e92c813c45467b3a3d6276764f5af290c148921e47090677ffe1c06

  • SSDEEP

    24576:D95afABzYKy2nSkoJj/ttg/dBoclnKklJ/RY:D95afgqhjFtg/dlnKKJ/RY

Score
6/10

Malware Config

Signatures

  • Drops desktop.ini file(s) 4 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\161d0337a809cd1589a6b3560d4974d5_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\161d0337a809cd1589a6b3560d4974d5_JaffaCakes118.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Suspicious use of SetWindowsHookEx
    PID:2860

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\RECYCLER\ã..\desktop.ini

    Filesize

    65B

    MD5

    ad0b0b4416f06af436328a3c12dc491b

    SHA1

    743c7ad130780de78ccbf75aa6f84298720ad3fa

    SHA256

    23521de51ca1db2bc7b18e41de7693542235284667bf85f6c31902547a947416

    SHA512

    884cd0cae3b31a594f387dae94fc1e0aacb4fd833f8a3368bdec7de0f9f3dc44337c7318895d9549aad579f95de71ff45e1618e75065a04c7894ad1d0d0eac56

  • memory/2860-0-0x0000000000400000-0x00000000005AE000-memory.dmp

    Filesize

    1.7MB

  • memory/2860-1-0x0000000002220000-0x0000000002270000-memory.dmp

    Filesize

    320KB

  • memory/2860-2-0x00000000022B0000-0x00000000022B1000-memory.dmp

    Filesize

    4KB

  • memory/2860-9-0x0000000002CA0000-0x0000000002CA1000-memory.dmp

    Filesize

    4KB

  • memory/2860-8-0x0000000002290000-0x0000000002291000-memory.dmp

    Filesize

    4KB

  • memory/2860-7-0x00000000022D0000-0x00000000022D1000-memory.dmp

    Filesize

    4KB

  • memory/2860-6-0x0000000002280000-0x0000000002281000-memory.dmp

    Filesize

    4KB

  • memory/2860-5-0x0000000002270000-0x0000000002271000-memory.dmp

    Filesize

    4KB

  • memory/2860-4-0x0000000000750000-0x0000000000751000-memory.dmp

    Filesize

    4KB

  • memory/2860-3-0x0000000000760000-0x0000000000761000-memory.dmp

    Filesize

    4KB

  • memory/2860-37-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-77-0x0000000002510000-0x0000000002511000-memory.dmp

    Filesize

    4KB

  • memory/2860-78-0x00000000024E0000-0x00000000024E1000-memory.dmp

    Filesize

    4KB

  • memory/2860-76-0x0000000002500000-0x0000000002501000-memory.dmp

    Filesize

    4KB

  • memory/2860-75-0x00000000024F0000-0x00000000024F1000-memory.dmp

    Filesize

    4KB

  • memory/2860-74-0x00000000024B0000-0x00000000024B1000-memory.dmp

    Filesize

    4KB

  • memory/2860-73-0x00000000024C0000-0x00000000024C1000-memory.dmp

    Filesize

    4KB

  • memory/2860-72-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-71-0x0000000002CA0000-0x0000000002CA1000-memory.dmp

    Filesize

    4KB

  • memory/2860-70-0x0000000002CA0000-0x0000000002CA1000-memory.dmp

    Filesize

    4KB

  • memory/2860-69-0x0000000002CA0000-0x0000000002CA1000-memory.dmp

    Filesize

    4KB

  • memory/2860-68-0x0000000002CA0000-0x0000000002CA1000-memory.dmp

    Filesize

    4KB

  • memory/2860-67-0x0000000002CA0000-0x0000000002CA1000-memory.dmp

    Filesize

    4KB

  • memory/2860-66-0x0000000002CA0000-0x0000000002CA1000-memory.dmp

    Filesize

    4KB

  • memory/2860-65-0x0000000002CA0000-0x0000000002CA1000-memory.dmp

    Filesize

    4KB

  • memory/2860-64-0x0000000002CA0000-0x0000000002CA1000-memory.dmp

    Filesize

    4KB

  • memory/2860-63-0x0000000002CA0000-0x0000000002CA1000-memory.dmp

    Filesize

    4KB

  • memory/2860-62-0x0000000002CA0000-0x0000000002CA1000-memory.dmp

    Filesize

    4KB

  • memory/2860-61-0x0000000002CA0000-0x0000000002CA1000-memory.dmp

    Filesize

    4KB

  • memory/2860-60-0x0000000002CA0000-0x0000000002CA1000-memory.dmp

    Filesize

    4KB

  • memory/2860-59-0x0000000002CA0000-0x0000000002CA1000-memory.dmp

    Filesize

    4KB

  • memory/2860-58-0x0000000002CA0000-0x0000000002CA1000-memory.dmp

    Filesize

    4KB

  • memory/2860-57-0x0000000002CA0000-0x0000000002CA1000-memory.dmp

    Filesize

    4KB

  • memory/2860-56-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-55-0x0000000002310000-0x0000000002311000-memory.dmp

    Filesize

    4KB

  • memory/2860-54-0x0000000002350000-0x0000000002351000-memory.dmp

    Filesize

    4KB

  • memory/2860-53-0x0000000002490000-0x0000000002491000-memory.dmp

    Filesize

    4KB

  • memory/2860-52-0x0000000002340000-0x0000000002341000-memory.dmp

    Filesize

    4KB

  • memory/2860-51-0x0000000002330000-0x0000000002331000-memory.dmp

    Filesize

    4KB

  • memory/2860-50-0x00000000022F0000-0x00000000022F1000-memory.dmp

    Filesize

    4KB

  • memory/2860-49-0x0000000002300000-0x0000000002301000-memory.dmp

    Filesize

    4KB

  • memory/2860-48-0x0000000002480000-0x0000000002481000-memory.dmp

    Filesize

    4KB

  • memory/2860-47-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-46-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-45-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-44-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-43-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-42-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-41-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-40-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-39-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-38-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-36-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-35-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-34-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-33-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-32-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-31-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-30-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-29-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-28-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-27-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-26-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-25-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-24-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-23-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-22-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-21-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-20-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-19-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-18-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-17-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-16-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-15-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB

  • memory/2860-14-0x0000000002CA0000-0x0000000002CA1000-memory.dmp

    Filesize

    4KB

  • memory/2860-13-0x0000000002CA0000-0x0000000002CA1000-memory.dmp

    Filesize

    4KB

  • memory/2860-12-0x0000000002CA0000-0x0000000002CA1000-memory.dmp

    Filesize

    4KB

  • memory/2860-11-0x0000000002CA0000-0x0000000002CA1000-memory.dmp

    Filesize

    4KB

  • memory/2860-10-0x0000000000790000-0x0000000000791000-memory.dmp

    Filesize

    4KB

  • memory/2860-81-0x0000000000740000-0x0000000000741000-memory.dmp

    Filesize

    4KB

  • memory/2860-80-0x0000000000730000-0x0000000000731000-memory.dmp

    Filesize

    4KB

  • memory/2860-79-0x0000000002C80000-0x0000000002C84000-memory.dmp

    Filesize

    16KB

  • memory/2860-92-0x0000000000400000-0x00000000005AE000-memory.dmp

    Filesize

    1.7MB

  • memory/2860-93-0x0000000002220000-0x0000000002270000-memory.dmp

    Filesize

    320KB

  • memory/2860-94-0x0000000002CA0000-0x0000000002CA1000-memory.dmp

    Filesize

    4KB

  • memory/2860-96-0x0000000002C90000-0x0000000002C91000-memory.dmp

    Filesize

    4KB