Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    19/09/2024, 18:35

General

  • Target

    ebf4483f0e40b44b3a45bced9add8ea2_JaffaCakes118.exe

  • Size

    702KB

  • MD5

    ebf4483f0e40b44b3a45bced9add8ea2

  • SHA1

    c2c69a14bc5cc89bac6fc4c09cc3b9144729407e

  • SHA256

    3e8db5b20a3e07f8229f4e2d07694331bb06ed0e9f40c2d684148e3aac49bbe2

  • SHA512

    41b1c7dc74c2dfb89b8a00b2a5b3f6ad5cd10d0829c4b4c9f0102228a0006c8398e919d3e22a4f260c31ca9db2cb36b9a1490b2f70e9b63dee8c027c9637978b

  • SSDEEP

    12288:+p6hQgF0WEbDKUieV1wzAKfo2PBsFzVEF3Z4mxxxuxm1EZi9XxF9E2AG9:30WEnnhbwkaPPGgQmXIw1wi9D9E2Ag

Score
8/10

Malware Config

Signatures

  • Server Software Component: Terminal Services DLL 1 TTPs 1 IoCs
  • Drops file in System32 directory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ebf4483f0e40b44b3a45bced9add8ea2_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\ebf4483f0e40b44b3a45bced9add8ea2_JaffaCakes118.exe"
    1⤵
    • Server Software Component: Terminal Services DLL
    • Drops file in System32 directory
    PID:2240

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2240-1-0x0000000000310000-0x0000000000364000-memory.dmp

    Filesize

    336KB

  • memory/2240-0-0x0000000000400000-0x00000000004F8000-memory.dmp

    Filesize

    992KB

  • memory/2240-18-0x0000000000710000-0x0000000000711000-memory.dmp

    Filesize

    4KB

  • memory/2240-32-0x0000000003230000-0x0000000003231000-memory.dmp

    Filesize

    4KB

  • memory/2240-31-0x0000000003240000-0x0000000003241000-memory.dmp

    Filesize

    4KB

  • memory/2240-30-0x0000000003250000-0x0000000003251000-memory.dmp

    Filesize

    4KB

  • memory/2240-29-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/2240-28-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB

  • memory/2240-27-0x0000000003260000-0x0000000003261000-memory.dmp

    Filesize

    4KB

  • memory/2240-26-0x00000000007C0000-0x00000000007C1000-memory.dmp

    Filesize

    4KB

  • memory/2240-25-0x0000000002000000-0x0000000002001000-memory.dmp

    Filesize

    4KB

  • memory/2240-24-0x0000000000760000-0x0000000000761000-memory.dmp

    Filesize

    4KB

  • memory/2240-23-0x0000000000770000-0x0000000000771000-memory.dmp

    Filesize

    4KB

  • memory/2240-22-0x0000000000790000-0x0000000000791000-memory.dmp

    Filesize

    4KB

  • memory/2240-21-0x00000000007B0000-0x00000000007B1000-memory.dmp

    Filesize

    4KB

  • memory/2240-20-0x00000000003F0000-0x00000000003F1000-memory.dmp

    Filesize

    4KB

  • memory/2240-19-0x0000000000740000-0x0000000000741000-memory.dmp

    Filesize

    4KB

  • memory/2240-17-0x0000000000720000-0x0000000000721000-memory.dmp

    Filesize

    4KB

  • memory/2240-16-0x00000000003D0000-0x00000000003D1000-memory.dmp

    Filesize

    4KB

  • memory/2240-15-0x00000000003E0000-0x00000000003E1000-memory.dmp

    Filesize

    4KB

  • memory/2240-14-0x0000000000730000-0x0000000000731000-memory.dmp

    Filesize

    4KB

  • memory/2240-13-0x00000000006E0000-0x00000000006E1000-memory.dmp

    Filesize

    4KB

  • memory/2240-12-0x0000000000700000-0x0000000000701000-memory.dmp

    Filesize

    4KB

  • memory/2240-11-0x0000000003210000-0x0000000003212000-memory.dmp

    Filesize

    8KB

  • memory/2240-10-0x00000000003B0000-0x00000000003B1000-memory.dmp

    Filesize

    4KB

  • memory/2240-9-0x0000000003220000-0x0000000003221000-memory.dmp

    Filesize

    4KB

  • memory/2240-8-0x0000000000380000-0x0000000000381000-memory.dmp

    Filesize

    4KB

  • memory/2240-7-0x0000000000390000-0x0000000000391000-memory.dmp

    Filesize

    4KB

  • memory/2240-6-0x0000000000240000-0x0000000000241000-memory.dmp

    Filesize

    4KB

  • memory/2240-5-0x0000000000250000-0x0000000000251000-memory.dmp

    Filesize

    4KB

  • memory/2240-4-0x00000000003A0000-0x00000000003A1000-memory.dmp

    Filesize

    4KB

  • memory/2240-3-0x0000000000270000-0x0000000000271000-memory.dmp

    Filesize

    4KB

  • memory/2240-2-0x0000000000370000-0x0000000000371000-memory.dmp

    Filesize

    4KB

  • memory/2240-37-0x0000000000400000-0x00000000004F8000-memory.dmp

    Filesize

    992KB

  • memory/2240-36-0x0000000000310000-0x0000000000364000-memory.dmp

    Filesize

    336KB