Analysis

  • max time kernel
    120s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    01-07-2024 17:47

General

  • Target

    1beebba38507c0c80fad9310a3976ff7_JaffaCakes118.exe

  • Size

    327KB

  • MD5

    1beebba38507c0c80fad9310a3976ff7

  • SHA1

    e0194f7ebc8f819225138e6146f05c4b0a0d3cf4

  • SHA256

    423eb70865e61db1c783542bc0e555dfead1751ee01ae05cc0ed358709e6edf1

  • SHA512

    6e2ae7c560df4243958ecd025ee7cf8b8b3d397467d0c816d3d85c2b498c9e2268ad3666a9cd1c8558229c35ee3a067dfdd708c656a838a189fa0a5b0bdcd848

  • SSDEEP

    6144:NssEwgnQ3U9jcw/17bY/uuTJEhqFGUFtIjUk6XWonOwh2MIFo:ZMQ3mjcw9fY/FFGqYUFt3k6msPYM6o

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1beebba38507c0c80fad9310a3976ff7_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\1beebba38507c0c80fad9310a3976ff7_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2008

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads