6b78b922364521975112ffd249ba3c2254e0b66a27a05663b1adacfa99112809

Analysis

max time kernel
93s
max time network
95s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
12/07/2024, 09:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3ce22ecad1899867364345c619a1bbb2_JaffaCakes118.exe
Size

4KB
MD5

3ce22ecad1899867364345c619a1bbb2
SHA1

09eb60c2449eb0e7f4075231460bdebc1ecb5f36
SHA256

6b78b922364521975112ffd249ba3c2254e0b66a27a05663b1adacfa99112809
SHA512

de02fcc7fd12b0b830ec458d300abbca145342f8643192164c9dee7eb4db3f0b25119981de23a6d18b94f71fc291e4bcfbf36cde5e22a2681db00615543926f7

Score

6^/10

persistence

Malware Config

Signatures

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-3419463127-3903270268-2580331543-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Apple = "C:\\Users\\Admin\\AppData\\Local\\Temp\\Apple.exe"	3ce22ecad1899867364345c619a1bbb2_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\3ce22ecad1899867364345c619a1bbb2_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\3ce22ecad1899867364345c619a1bbb2_JaffaCakes118.exe"
1⤵
- Adds Run key to start application
PID:4824

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4824-0-0x00000000746E2000-0x00000000746E3000-memory.dmp

Filesize
4KB

Download
memory/4824-1-0x00000000746E0000-0x0000000074C91000-memory.dmp

Filesize
5.7MB

Download
memory/4824-2-0x00000000746E0000-0x0000000074C91000-memory.dmp

Filesize
5.7MB

Download
memory/4824-4-0x00000000746E0000-0x0000000074C91000-memory.dmp

Filesize
5.7MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads