Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    16/08/2024, 20:38

General

  • Target

    9fd8175adea2a87494b07d4b3bc7f252_JaffaCakes118.exe

  • Size

    2.1MB

  • MD5

    9fd8175adea2a87494b07d4b3bc7f252

  • SHA1

    aba47e9a618d0f7e991e2de708fe89ea788f29f7

  • SHA256

    fc5a74c93807feb5105e4b91d400c78027b3cfffa7df1063da05b59e4c648627

  • SHA512

    328d0177258e1044c7f63a0ff3b0cd4cb68d3992b60f82c7805af33b26ff0a6b8eee632688c2ce3260014054bb277d449d908585c98fa91775d7ae523b6cd159

  • SSDEEP

    768:tks+cAXJpB2TgpZnjJHk/OxJ+oFEZEM/4t:tjrAX5NjJHJ+oFE2M/4t

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Drops file in Windows directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\9fd8175adea2a87494b07d4b3bc7f252_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\9fd8175adea2a87494b07d4b3bc7f252_JaffaCakes118.exe"
    1⤵
    • Adds Run key to start application
    • Drops file in Windows directory
    • System Location Discovery: System Language Discovery
    PID:2852

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Windows\Intelx386\Update Photoshop 8.0 to Photoshop 9.5 (It´s Work!).exe

    Filesize

    3.9MB

    MD5

    057e22e9e99a33cf34fedc7cca059f36

    SHA1

    b3bbcf7b0e1ee9fc8799c81d4bab0590884b9510

    SHA256

    01843d27949d768035330b5bb63d636757c1e11257056442bfa7973b72432f2b

    SHA512

    115a6a933a137f87dac5b2b2eec7916dea5d93e6f7af82f736c4e0570074493e91489f918382fba8b445d293fa430e9c8c636c3f7ad324549884b49b2e84b17c