Analysis
- max time kernel
93s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20240704-en - resource tags
- submitted
08/07/2024, 00:38
General
- Target 2a5e3f17fb10a4563e7596f1a163c885_JaffaCakes118.exe
- Size 703KB
- Sample240708-ay4tsswene
- SHA256 737dac882bbacfd5b483c79f559d4214cd06a45cfc21995acb21a496bf2f3254
Score
7/10
Malware Config
Signatures
- ACProtect 1.3x - 1.4x DLL software 2 IoCs
Detects file using ACProtect software.
- Loads dropped DLL 13 IoCs
- UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\2a5e3f17fb10a4563e7596f1a163c885_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\2a5e3f17fb10a4563e7596f1a163c885_JaffaCakes118.exe"1⤵
- Loads dropped DLL
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
System.dll
UAC.dll
inetc.dll
md5dll.dll
nsisXML.dll
memory/3188-10-0x0000000003290000-0x0000000003299000-memory.dmp
memory/3188-49-0x0000000003C80000-0x0000000003C89000-memory.dmp
memory/3188-50-0x0000000003290000-0x0000000003299000-memory.dmp
memory/3188-51-0x0000000003290000-0x0000000003299000-memory.dmp
memory/3188-52-0x0000000003C80000-0x0000000003C89000-memory.dmp