Analysis
-
max time kernel
141s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
12/07/2024, 16:57
General
-
Target
3e258fe1c69b33607c5f1fed2602ed39_JaffaCakes118.exe
-
Size
2.6MB
-
MD5
3e258fe1c69b33607c5f1fed2602ed39
-
SHA1
62996cfcf464a3b0bc0420c899005d582ff4fe6c
-
SHA256
390971b4794f5a53cebf273112309946858797dbcd3c32572a12c3c6ae8781f7
-
SHA512
4d9083bd2819e0d0f79855c3c4d2a1070ab220997b2a36c7a106ca80ed08fd92e3f4f5f467e930da69411d24438fd33eb6dcb30d57b230a75198481b72b32143
-
SSDEEP
49152:PHtELx38It8f7TF4lWZ2iT42bWO8QwIIOdMaIUsN5L0R9Fyvi5OZa:PHtCxwh4kZ2ic6wLPpUsN5i9FycP
Score
8/10
Malware Config
Signatures
-
Uses Session Manager for persistence 2 TTPs 1 IoCs
Creates Session Manager registry key to run executable early in system boot.
-
Drops file in Windows directory 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3e258fe1c69b33607c5f1fed2602ed39_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3e258fe1c69b33607c5f1fed2602ed39_JaffaCakes118.exe"1⤵
- Uses Session Manager for persistence
- Drops file in Windows directory
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7.9MB
-
Filesize
8KB
-
Filesize
4KB
-
Filesize
7.9MB
-
Filesize
7.9MB
-
Filesize
8KB
-
Filesize
4KB
-
Filesize
7.9MB
-
Filesize
7.9MB
-
Filesize
7.9MB
-
Filesize
7.9MB
-
Filesize
7.9MB
-
Filesize
7.9MB
-
Filesize
7.9MB
-
Filesize
7.9MB
-
Filesize
7.9MB
-
Filesize
7.9MB
-
Filesize
7.9MB