Analysis

  • max time kernel
    120s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    20/08/2024, 17:37

General

  • Target

    b02f2407a69e596f6989813df94079ff_JaffaCakes118.exe

  • Size

    37KB

  • MD5

    b02f2407a69e596f6989813df94079ff

  • SHA1

    4e0d501e1fd419a5b2c3cb2d6110fd6b1a52f3d7

  • SHA256

    2e45ad58a75f00b211bccea5dbee3b338908e60181879fb81a5ce617d08e8ad4

  • SHA512

    5c85e86645a1fd7f5bbaf8ea52800f240be9d7740a77f679f555a7c747427df69a6beae8f107eb141ca1d416e36e02ea6bd749d9db46e81c1a2b6d99a8ecb1b9

  • SSDEEP

    768:XcTa6BK8cVn1iQpkEDwdpO2xhaCBtnXvVn0oIdf:Xc5Ed1iQ+IwPO8aUnfZO

Score
6/10

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Suspicious behavior: RenamesItself 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b02f2407a69e596f6989813df94079ff_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\b02f2407a69e596f6989813df94079ff_JaffaCakes118.exe"
    1⤵
    • Adds Run key to start application
    • Suspicious behavior: RenamesItself
    PID:2272

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2272-0-0x0000000000400000-0x0000000000424000-memory.dmp

    Filesize

    144KB

  • memory/2272-2-0x0000000000400000-0x0000000000424000-memory.dmp

    Filesize

    144KB

  • memory/2272-1-0x0000000000422000-0x0000000000423000-memory.dmp

    Filesize

    4KB

  • memory/2272-3-0x0000000000400000-0x0000000000424000-memory.dmp

    Filesize

    144KB

  • memory/2272-4-0x0000000000422000-0x0000000000423000-memory.dmp

    Filesize

    4KB

  • memory/2272-5-0x0000000000400000-0x0000000000424000-memory.dmp

    Filesize

    144KB

  • memory/2272-16-0x0000000000400000-0x0000000000424000-memory.dmp

    Filesize

    144KB