Analysis
-
max time kernel
145s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
09-10-2024 10:55
General
-
Target
2fde964f76810e8d3498347c5650fb1c_JaffaCakes118.exe
-
Size
267KB
-
MD5
2fde964f76810e8d3498347c5650fb1c
-
SHA1
a685b466860feeef6e47e448d294eafe64575158
-
SHA256
b66e9e1363124bb07da4e0c19099d81e0a0f569fb5e97979ba0311270f8c9b85
-
SHA512
4cba337fa8a93664bda18292bad76fde2c5952e08e24aa60816e994b371f3e1d7b2102d36fb99038d4797dc7e6e62524604769ef5979429276cb2ba95819bf44
-
SSDEEP
6144:gfgVeA5ci5S4XIilT63xjUc2CzHOR8JhTmak:gweCci0MIgu9UX+Jmak
Malware Config
Signatures
-
Enumerates connected drives 3 TTPs 1 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2fde964f76810e8d3498347c5650fb1c_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\2fde964f76810e8d3498347c5650fb1c_JaffaCakes118.exe"1⤵
- Enumerates connected drives
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
732KB
-
Filesize
732KB
-
Filesize
732KB
-
Filesize
732KB
-
Filesize
732KB
-
Filesize
732KB
-
Filesize
732KB
-
Filesize
732KB
-
Filesize
732KB
-
Filesize
732KB
-
Filesize
732KB
-
Filesize
732KB
-
Filesize
732KB
-
Filesize
732KB