Analysis
-
max time kernel
142s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
03/07/2024, 22:56
General
-
Target
23bf4114be4b82babb1e55eedd8eafa1_JaffaCakes118.exe
-
Size
642KB
-
MD5
23bf4114be4b82babb1e55eedd8eafa1
-
SHA1
abcfc8cb0213b37c236834aed3646ee507c97d7f
-
SHA256
5b21aff1e4b3ab6bea456b8e903fcfc655521aaeae5a6be13ac0b8d97217c2fb
-
SHA512
74c7e07f4c711a51c6533458490bfbd9add3c19926ec10b6a21fae8f397aba5bd7e0bade934b2ce62e01db6d9e1269dd047c3a88d0ed9853d26967c9b7d780d9
-
SSDEEP
12288:/jbo6NcsmvoipTPWiSDZLwuLL2AwW101F3Z4mxxODqVTVOC7:/ssmwATrIZ9inQmXdVTz7
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Drops file in Windows directory 5 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\23bf4114be4b82babb1e55eedd8eafa1_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\23bf4114be4b82babb1e55eedd8eafa1_JaffaCakes118.exe"1⤵
- Drops file in Windows directory
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\cmd.execmd /c C:\Windows\RAV2007.BAT2⤵
- Deletes itself
-
-
C:\Windows\Utility.exeC:\Windows\Utility.exe1⤵
- Executes dropped EXE
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
218B
MD5e1b173d6e48cbec1a639bbea8faefab3
SHA1ce3e8fa930e9e535ac7bd66e817e166d1ad22bfc
SHA2563604fff9d4ec24f1639cd3c9a0cab0ec279cb02458cb818c69e281b294d7aa78
SHA5126f9ef69a390de6bdadc734cbaac97fd11ae026fa6e1eadd10ff7105e95f4e5c21bc689b56b1eeb2154f22a19a623804b001d097c851bbec931c188b75c160085
-
Filesize
642KB
MD523bf4114be4b82babb1e55eedd8eafa1
SHA1abcfc8cb0213b37c236834aed3646ee507c97d7f
SHA2565b21aff1e4b3ab6bea456b8e903fcfc655521aaeae5a6be13ac0b8d97217c2fb
SHA51274c7e07f4c711a51c6533458490bfbd9add3c19926ec10b6a21fae8f397aba5bd7e0bade934b2ce62e01db6d9e1269dd047c3a88d0ed9853d26967c9b7d780d9
-
Filesize
1.3MB
-
Filesize
604KB
-
Filesize
604KB
-
Filesize
1.3MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
1.3MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
1024KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
1.3MB
-
Filesize
336KB
-
Filesize
336KB