Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
-
submitted
04/07/2024, 02:02
General
-
Target
24429bbaa7d3c588417acacbafab2f85_JaffaCakes118.exe
-
Size
456KB
-
MD5
24429bbaa7d3c588417acacbafab2f85
-
SHA1
e7288439377b3a972ef2b5b1cded472f1b11b6ca
-
SHA256
3d452997002b439edf0851d4cdd0daedff2ea979ab50f92c6dc127eeaefcfb20
-
SHA512
fd3d029839c674eff525977caa6ad1ce6efc24ed14fe57aa8ee34ba09e5472a16e0bbe72e4418b6778b4369228565fb19d125754aa9adc50b03e85296e749722
-
SSDEEP
12288:LjkArEN249AyE/rbaMct4bO2/Vmds+lTOws/aOe:AFE//Tct4bOsOTY/Xe
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 10 IoCs
-
Suspicious use of SendNotifyMessage 10 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\24429bbaa7d3c588417acacbafab2f85_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\24429bbaa7d3c588417acacbafab2f85_JaffaCakes118.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
852KB
-
Filesize
852KB