Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
23/08/2024, 08:12
General
-
Target
baf4f7ae6951ad71f12e478d6becbbef_JaffaCakes118.exe
-
Size
1.9MB
-
MD5
baf4f7ae6951ad71f12e478d6becbbef
-
SHA1
5ac49bcbaef35ccf78e913d3f0651d1eb746a966
-
SHA256
52caa92241b2e093b7dd46de333035d36348aae5499166738b74fd6477c4bff4
-
SHA512
962dc8142ced7e9d80ad569c4ebf8d7c328788b57643917e83f911e664eec7b67680f594aa0fe6354ec7416da2c3a4687fe7518e368055b2aa370e0ecace716f
-
SSDEEP
24576:ow/BBBjXKT1DaIFZAH9MVYWkENLbvlT/w000000MdSKrIWK9exHT9UQ:dBXjXKT1Ddz9T/w000000M3rTT7
Malware Config
Signatures
-
Loads dropped DLL 4 IoCs
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Drops file in Program Files directory 4 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of FindShellTrayWindow 3 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
-
Suspicious use of SetWindowsHookEx 28 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\baf4f7ae6951ad71f12e478d6becbbef_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\baf4f7ae6951ad71f12e478d6becbbef_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Adds Run key to start application
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.9MB
MD5baf4f7ae6951ad71f12e478d6becbbef
SHA15ac49bcbaef35ccf78e913d3f0651d1eb746a966
SHA25652caa92241b2e093b7dd46de333035d36348aae5499166738b74fd6477c4bff4
SHA512962dc8142ced7e9d80ad569c4ebf8d7c328788b57643917e83f911e664eec7b67680f594aa0fe6354ec7416da2c3a4687fe7518e368055b2aa370e0ecace716f
-
Filesize
554KB
MD5c8f83a8327b280a6e33cf667904c9607
SHA15bc27ff7a590c335b5c44e668758b0efd5a91294
SHA256b251b512a7cb787348fad43d3d351c4d9965bcf0c0ca6d8f70cab9ecec0f6d22
SHA512f6bd32a548af79f5d35606725cdbb840f088a56bb56dd57354b6dabc017ab83f1f6d41278fc5a0c9f62ef03dc721926ae11ae932cc3170d0273baab93f61d53b
-
Filesize
348KB
-
Filesize
640KB
-
Filesize
628KB
-
Filesize
1.9MB
-
Filesize
324KB
-
Filesize
572KB
-
Filesize
1.4MB
-
Filesize
1.6MB
-
Filesize
168KB
-
Filesize
980KB
-
Filesize
2.1MB
-
Filesize
1.6MB
-
Filesize
640KB
-
Filesize
1.9MB
-
Filesize
12.3MB
-
Filesize
348KB
-
Filesize
492KB
-
Filesize
2.1MB
-
Filesize
36KB
-
Filesize
816KB
-
Filesize
1.6MB
-
Filesize
572KB
-
Filesize
1.4MB
-
Filesize
112KB
-
Filesize
980KB
-
Filesize
1.6MB
-
Filesize
524KB
-
Filesize
348KB
-
Filesize
1.6MB
-
Filesize
1.9MB
-
Filesize
1.6MB
-
Filesize
980KB
-
Filesize
524KB
-
Filesize
816KB
-
Filesize
2.1MB
-
Filesize
36KB
-
Filesize
1.6MB
-
Filesize
324KB
-
Filesize
1.6MB
-
Filesize
348KB
-
Filesize
640KB
-
Filesize
1.9MB
-
Filesize
40KB
-
Filesize
100KB
-
Filesize
448KB
-
Filesize
36KB
-
Filesize
156KB
-
Filesize
980KB
-
Filesize
524KB
-
Filesize
816KB
-
Filesize
2.1MB
-
Filesize
572KB
-
Filesize
324KB
-
Filesize
1.6MB
-
Filesize
640KB
-
Filesize
628KB
-
Filesize
1.9MB
-
Filesize
40KB
-
Filesize
100KB
-
Filesize
448KB
-
Filesize
492KB
-
Filesize
324KB
-
Filesize
12.3MB
-
Filesize
1.6MB