Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
09/09/2024, 18:51
General
-
Target
d6e7653b768687bd5b7e63d64f0a84e8_JaffaCakes118.exe
-
Size
416KB
-
MD5
d6e7653b768687bd5b7e63d64f0a84e8
-
SHA1
37c14030bd94477bdc53edad9f2f725258977f56
-
SHA256
1a120f32d11efb9f017de79b6873cf56a340c6ff5cae517cb3750011b1376e58
-
SHA512
54ad28405f2ae9af363b6bf34a14a49d9cd34583b29330620c4f2493e00f22320225155b3a0bc2a0663e3ab94aa21663239466487372e861add89d0725bf8f9d
-
SSDEEP
6144:xjUKCV8oNHmISaewqV1ad9/JKBvBd+ViBsf0nue8LsFtsGmOOsHxvD0p8DCLwa0R:xfoNlvA1aNEAPSeAaOOccGz
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Windows directory 6 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 2 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d6e7653b768687bd5b7e63d64f0a84e8_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\d6e7653b768687bd5b7e63d64f0a84e8_JaffaCakes118.exe"1⤵
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Windows\Bgisaa.exeC:\Windows\Bgisaa.exe2⤵
- Executes dropped EXE
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
416KB
MD5d6e7653b768687bd5b7e63d64f0a84e8
SHA137c14030bd94477bdc53edad9f2f725258977f56
SHA2561a120f32d11efb9f017de79b6873cf56a340c6ff5cae517cb3750011b1376e58
SHA51254ad28405f2ae9af363b6bf34a14a49d9cd34583b29330620c4f2493e00f22320225155b3a0bc2a0663e3ab94aa21663239466487372e861add89d0725bf8f9d
-
Filesize
372B
MD5d513a884e6bdd971f88ea77147ec195d
SHA12b192a889b5558b74724e900fd819bbc1bbdd777
SHA256bd85796843cba086eb296907d312796ee36ca92e2634c6cb70646b8c621b11d1
SHA5127ba7c6294d63685082d8424bec4be04eeac0ac9b048a74bd3873aaf043227dd95316b679fbd26d1beafc2f47a10b70dff38811409c8b451380b676c4a60a05ee
-
Filesize
424KB
-
Filesize
244KB
-
Filesize
424KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
4KB
-
Filesize
424KB
-
Filesize
424KB
-
Filesize
424KB
-
Filesize
424KB
-
Filesize
244KB