Analysis
-
max time kernel
140s -
max time network
146s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
08-09-2024 14:39
General
-
Target
d495d31dd83f98792301199590ca8cd5_JaffaCakes118.exe
-
Size
129KB
-
MD5
d495d31dd83f98792301199590ca8cd5
-
SHA1
f05d5c9e22fb91fdbd35107a38200da57bc798dc
-
SHA256
187efdfeb0e00adf62b6fd600fd9ec3e2cdd4f0e986a4ed9611c355498031cc9
-
SHA512
a928b93e00758d2c3e191cc3df68d277a719ee14f9fb37043bbb6e6c1955487a3b9a2a07029ed390bb181cfdeb0ebeaecc82848409c7b3ac34e3154e7b542573
-
SSDEEP
3072:zDOGdlYTOwgImzX7zU4NGTzCeD5zJ40yf6xiM3pkp3c0B4j:zaQYTOum7LGTzCeIM5kps0Be
Score
7/10
Malware Config
Signatures
-
UPX packed file 4 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Adds Run key to start application 2 TTPs 2 IoCs
-
Checks for any installed AV software in registry 1 TTPs 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\d495d31dd83f98792301199590ca8cd5_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\d495d31dd83f98792301199590ca8cd5_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- Checks for any installed AV software in registry
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
28KB
-
Filesize
28KB
-
Filesize
152KB
-
Filesize
272KB
-
Filesize
152KB
-
Filesize
272KB