Analysis
- max time kernel
125s - max time network
128s - platform
windows10-2004_x64 - resource
win10v2004-20240802-en - resource tags
- submitted
29/09/2024, 12:06
General
- Target fe7dfb1ef330de1f3ff4b2455275c12f_JaffaCakes118.exe
- Size 456KB
- Sample240929-n96dnaxbkb
- SHA256 128436e5c645572fd11442a07fb171cc0c1750951e0de836d88d76897456f008
Malware Config
Signatures
- Drops startup file 1 IoCs
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\fe7dfb1ef330de1f3ff4b2455275c12f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\fe7dfb1ef330de1f3ff4b2455275c12f_JaffaCakes118.exe"1⤵
- Drops startup file
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4116,i,1602949858158667699,12464335823361976127,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:81⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1948-0-0x0000000000BB0000-0x0000000000BB1000-memory.dmp
memory/1948-2-0x0000000000BE0000-0x0000000000BE1000-memory.dmp
memory/1948-1-0x0000000000BD0000-0x0000000000BD2000-memory.dmp
memory/1948-3-0x0000000001C10000-0x0000000001C11000-memory.dmp
memory/1948-4-0x0000000001C30000-0x0000000001C31000-memory.dmp
memory/1948-5-0x0000000001C40000-0x0000000001C41000-memory.dmp
memory/1948-6-0x0000000003400000-0x0000000003401000-memory.dmp
memory/1948-7-0x0000000003410000-0x0000000003411000-memory.dmp
memory/1948-15-0x00000000038C0000-0x00000000038C1000-memory.dmp
memory/1948-16-0x0000000003900000-0x0000000003901000-memory.dmp
memory/1948-14-0x00000000038B0000-0x00000000038B1000-memory.dmp
memory/1948-13-0x00000000038A0000-0x00000000038A1000-memory.dmp
memory/1948-12-0x0000000003890000-0x0000000003891000-memory.dmp
memory/1948-11-0x0000000003880000-0x0000000003881000-memory.dmp
memory/1948-10-0x0000000003870000-0x0000000003871000-memory.dmp
memory/1948-9-0x0000000003860000-0x0000000003861000-memory.dmp
memory/1948-8-0x0000000003850000-0x0000000003851000-memory.dmp
memory/1948-19-0x00000000038D0000-0x00000000038FC000-memory.dmp
memory/1948-17-0x0000000003840000-0x0000000003842000-memory.dmp
memory/1948-18-0x0000000003910000-0x0000000003911000-memory.dmp
memory/1948-25-0x0000000003920000-0x0000000003921000-memory.dmp
memory/1948-31-0x0000000003470000-0x0000000003471000-memory.dmp
memory/1948-30-0x0000000003460000-0x0000000003461000-memory.dmp
memory/1948-29-0x0000000003450000-0x0000000003451000-memory.dmp
memory/1948-28-0x0000000003440000-0x0000000003441000-memory.dmp
memory/1948-27-0x0000000003430000-0x0000000003431000-memory.dmp
memory/1948-26-0x0000000003420000-0x0000000003421000-memory.dmp
memory/1948-24-0x0000000003940000-0x0000000003941000-memory.dmp
memory/1948-23-0x0000000003930000-0x0000000003931000-memory.dmp
memory/1948-38-0x0000000003770000-0x0000000003771000-memory.dmp