Analysis

  • max time kernel
    140s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-07-2024 21:19

General

  • Target

    5db572d1bfba3aee049dfef7494ddccf_JaffaCakes118.exe

  • Size

    119KB

  • MD5

    5db572d1bfba3aee049dfef7494ddccf

  • SHA1

    16708dc69cd7552db76c971a01f4eafe09e30235

  • SHA256

    10ad9321d8545831ca7287941736b85b5f913a26e246067e9f5b11a1fa912e2d

  • SHA512

    d13517fd9960b89ebb8193b82f6eaacb584cc0932b80db6cada5e0e880ee2d6e8c5990174be68b7d112ff3948935e062fd92cac2f124de5c78b935de7bf8e954

  • SSDEEP

    1536:zr+SCkFCjsUXx2LxaadvEOs3yroejPnwSTrsyZEUGlfunkUpVG2iR0nzj7YdsEOX:zCyIxKoabIej/wDKzGlGkR2Z7Y2pZn2K

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\5db572d1bfba3aee049dfef7494ddccf_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\5db572d1bfba3aee049dfef7494ddccf_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    PID:3972

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\GLCB92E.tmp

    Filesize

    155KB

    MD5

    e98cd701bd6caa7c9805d0f36e2b4c2b

    SHA1

    cd5a5fb44ec271ac83a3fda3b5e39f28c4b5cd43

    SHA256

    f39b226b75b54898d7b0eeb0ece2bf3ae5f3f248895085bd87f89441a602e69c

    SHA512

    2e51a5206564ccf20325369f37a9e0759208b7fce31642baa600311475e6df3b31202b8d456c5f2a57abe0e7d3ee83c59805e6ee6aac5d87530524cd49a7c85d