Analysis

  • max time kernel
    141s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    10/07/2024, 05:42

General

  • Target

    33834955eb80ee28aa9fe2931d623e84_JaffaCakes118.exe

  • Size

    21KB

  • MD5

    33834955eb80ee28aa9fe2931d623e84

  • SHA1

    2574424bf7368f21169757428fc6162cfc7a1147

  • SHA256

    cc630c8ee16a8120e9568e4dabc89ea7b454b8dbf27ef396937c4e87b62d6083

  • SHA512

    05f3f1fefd2ce7c072e0e1bd53135d11a915a586e4434778a98bfb3be8937ddabf450d758e4a051432ec41d029fbf43841a29b354bbc822fcf56be33533cf889

  • SSDEEP

    384:JL7eRw68dGH1YOgHWZRLf4jm9XFfSvHlYc35X:Z7eRVSGGHMFi7d

Score
6/10

Malware Config

Signatures

  • Drops desktop.ini file(s) 2 IoCs
  • Drops autorun.inf file 1 TTPs 5 IoCs

    Malware can abuse Windows Autorun to spread further via attached volumes.

Processes

  • C:\Users\Admin\AppData\Local\Temp\33834955eb80ee28aa9fe2931d623e84_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\33834955eb80ee28aa9fe2931d623e84_JaffaCakes118.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops autorun.inf file
    PID:2528

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • F:\greedy.exe

    Filesize

    21KB

    MD5

    33834955eb80ee28aa9fe2931d623e84

    SHA1

    2574424bf7368f21169757428fc6162cfc7a1147

    SHA256

    cc630c8ee16a8120e9568e4dabc89ea7b454b8dbf27ef396937c4e87b62d6083

    SHA512

    05f3f1fefd2ce7c072e0e1bd53135d11a915a586e4434778a98bfb3be8937ddabf450d758e4a051432ec41d029fbf43841a29b354bbc822fcf56be33533cf889

  • memory/2528-0-0x000007FEF5A6E000-0x000007FEF5A6F000-memory.dmp

    Filesize

    4KB

  • memory/2528-1-0x000007FEF57B0000-0x000007FEF614D000-memory.dmp

    Filesize

    9.6MB

  • memory/2528-2-0x000007FEF57B0000-0x000007FEF614D000-memory.dmp

    Filesize

    9.6MB

  • memory/2528-4-0x000007FEF57B0000-0x000007FEF614D000-memory.dmp

    Filesize

    9.6MB

  • memory/2528-5-0x000007FEF57B0000-0x000007FEF614D000-memory.dmp

    Filesize

    9.6MB

  • memory/2528-6-0x000007FEF57B0000-0x000007FEF614D000-memory.dmp

    Filesize

    9.6MB