Analysis
-
max time kernel
140s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
03/07/2024, 06:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
215dd590c9264ba19c9e167e6c4f114f_JaffaCakes118.exe
Resource
win7-20240508-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
215dd590c9264ba19c9e167e6c4f114f_JaffaCakes118.exe
Resource
win10v2004-20240611-en
2 signatures
150 seconds
General
-
Target
215dd590c9264ba19c9e167e6c4f114f_JaffaCakes118.exe
-
Size
371KB
-
MD5
215dd590c9264ba19c9e167e6c4f114f
-
SHA1
2f6520918c59f3b2e4833121e4a43511d28958ce
-
SHA256
e80a26cc010fd8929d8a55d67e143741f3687bbf445d9c06f098b387d80f8e0d
-
SHA512
3cf02410656e0c4ba1c9651e7ac770088a484488b520719f765fa618ce68da4ff6145c0b2ff97509357d66558ac985250f502df3c8cafaa43c91c47307f9977f
-
SSDEEP
384:CX+KSBCmBlJtKtdXJUAMKMN9+zUJJBD/VQ3oQNjpRraGFIp:HKWb4OjVAoUj7+
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\lsass.exe = "C:\\Windows\\lsass.exe" 215dd590c9264ba19c9e167e6c4f114f_JaffaCakes118.exe -
Drops file in Windows directory 2 IoCs
description ioc Process File created C:\Windows\lsass.exe 215dd590c9264ba19c9e167e6c4f114f_JaffaCakes118.exe File opened for modification C:\Windows\lsass.exe 215dd590c9264ba19c9e167e6c4f114f_JaffaCakes118.exe