Analysis
-
max time kernel
142s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
27-06-2024 13:07
Static task
static1
Behavioral task
behavioral1
Sample
161d0337a809cd1589a6b3560d4974d5_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
161d0337a809cd1589a6b3560d4974d5_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
161d0337a809cd1589a6b3560d4974d5_JaffaCakes118.exe
-
Size
1.0MB
-
MD5
161d0337a809cd1589a6b3560d4974d5
-
SHA1
525ef06fe21854f891e0ac43332e71eb31c18cc3
-
SHA256
86eaed5bfb01c116c54275f16e225af375c901ee4ff9998a9ae0e3b88ab1874e
-
SHA512
ef0442d2e75f41b3a99a95358121a23ddd1d4b0d8a9df52145da3ee369938428929a73112e92c813c45467b3a3d6276764f5af290c148921e47090677ffe1c06
-
SSDEEP
24576:D95afABzYKy2nSkoJj/ttg/dBoclnKklJ/RY:D95afgqhjFtg/dlnKKJ/RY
Malware Config
Signatures
-
Drops desktop.ini file(s) 4 IoCs
description ioc Process File opened for modification C:\RECYCLER\ã..\desktop.ini 161d0337a809cd1589a6b3560d4974d5_JaffaCakes118.exe File created C:\RECYCLER\desktop.ini 161d0337a809cd1589a6b3560d4974d5_JaffaCakes118.exe File opened for modification C:\RECYCLER\desktop.ini 161d0337a809cd1589a6b3560d4974d5_JaffaCakes118.exe File created C:\RECYCLER\ã..\desktop.ini 161d0337a809cd1589a6b3560d4974d5_JaffaCakes118.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2860 161d0337a809cd1589a6b3560d4974d5_JaffaCakes118.exe 2860 161d0337a809cd1589a6b3560d4974d5_JaffaCakes118.exe 2860 161d0337a809cd1589a6b3560d4974d5_JaffaCakes118.exe 2860 161d0337a809cd1589a6b3560d4974d5_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
65B
MD5ad0b0b4416f06af436328a3c12dc491b
SHA1743c7ad130780de78ccbf75aa6f84298720ad3fa
SHA25623521de51ca1db2bc7b18e41de7693542235284667bf85f6c31902547a947416
SHA512884cd0cae3b31a594f387dae94fc1e0aacb4fd833f8a3368bdec7de0f9f3dc44337c7318895d9549aad579f95de71ff45e1618e75065a04c7894ad1d0d0eac56