Analysis
-
max time kernel
147s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
-
submitted
04/07/2024, 00:45
General
-
Target
240fadd191ef7dd39b4fd292a1c45461_JaffaCakes118.exe
-
Size
127KB
-
MD5
240fadd191ef7dd39b4fd292a1c45461
-
SHA1
dfb86418abc2ef33c50c3f8e32e40a05dcddbe7f
-
SHA256
dc998f75fc3bf62d784fc21ae6c8c802517d06b578ff78fb873f758b5461e76a
-
SHA512
890284fb5763dcdf02d003fea1026c018a98d1d601bbb7d4a066c239acd460d6c2808878fd6a3d6d7880d341c6594bcc68eb4d8be9336f695ae1c3397dc105ef
-
SSDEEP
3072:+1iv9/nijRoWyloPpd0aCbD16AdHxLURc:Uiv1nMme24AdB2c
Score
10/10
Malware Config
Signatures
-
Modifies firewall policy service 3 TTPs 2 IoCs
-
Adds Run key to start application 2 TTPs 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\240fadd191ef7dd39b4fd292a1c45461_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\240fadd191ef7dd39b4fd292a1c45461_JaffaCakes118.exe"1⤵
- Modifies firewall policy service
- Adds Run key to start application
Network
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1