Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
04-07-2024 05:18
General
-
Target
24c31fe38ddc71d37711362ee6ae58d3_JaffaCakes118.exe
-
Size
367KB
-
MD5
24c31fe38ddc71d37711362ee6ae58d3
-
SHA1
ae2e3380c7da94101f2f99c53b956b1bf5ddcced
-
SHA256
c426160fc9a1f53751f8937a9b0f995f01fe94be386c344646ad2b98e5ff1cf9
-
SHA512
6533a654b6e679b7c18b9a6f8cdeca77b99e122b43a5d574be83bb1d9493ff34a563321c9db21527a17769c2a2fc1ed9fd6b99e9ff08a85d97c83dd0163601ce
-
SSDEEP
6144:MRT9A65pP1wlYgrN1y6V1X1RonMequ8+my5ET7VHkpZO85a+cdtPKEXNS6sXSr2:MA65XwlYgrHy6V17kr8+m73epZOx+cjS
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 12 IoCs
-
Suspicious use of SendNotifyMessage 12 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\24c31fe38ddc71d37711362ee6ae58d3_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\24c31fe38ddc71d37711362ee6ae58d3_JaffaCakes118.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
656KB
-
Filesize
656KB