0b3655b797a704679dceb10a7db8dae2625a8d3b0050b52bbe5857066439dab8

Analysis

max time kernel
146s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
29/03/2024, 19:28

Target

2ac8a9004ccb93730af4064bc36a100d_JaffaCakes118.exe
Size

1.9MB
MD5

2ac8a9004ccb93730af4064bc36a100d
SHA1

c937736556f53fe24ca51386fbf771ff12ea2cf5
SHA256

0b3655b797a704679dceb10a7db8dae2625a8d3b0050b52bbe5857066439dab8
SHA512

f56f5e01ce99769c24d3bab49187c7b5bdf260655f9179384de9a5bd256acdd075ef8ab3eb2fa876c7bbfc4e3a2ff28fa07e168bc5fc97ccc2a5df4f8af31ef8
SSDEEP

49152:Qoa1taC070d8PPnnBuWPFt8CNTAHyOdbBbgGOxkUBG:Qoa1taC0L0WNiKTAHXvbg1xkUM

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2412	6571.tmp

Executes dropped EXE 1 IoCs

pid	Process
2412	6571.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2304 wrote to memory of 2412	2304	2ac8a9004ccb93730af4064bc36a100d_JaffaCakes118.exe	87
PID 2304 wrote to memory of 2412	2304	2ac8a9004ccb93730af4064bc36a100d_JaffaCakes118.exe	87
PID 2304 wrote to memory of 2412	2304	2ac8a9004ccb93730af4064bc36a100d_JaffaCakes118.exe	87

C:\Users\Admin\AppData\Local\Temp\2ac8a9004ccb93730af4064bc36a100d_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\2ac8a9004ccb93730af4064bc36a100d_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2304
- C:\Users\Admin\AppData\Local\Temp\6571.tmp
  "C:\Users\Admin\AppData\Local\Temp\6571.tmp" --splashC:\Users\Admin\AppData\Local\Temp\2ac8a9004ccb93730af4064bc36a100d_JaffaCakes118.exe 8EA4EEE58C608C9C2634D579E9D4374F7A043F663318FEB93CA2B018EC415DBDFBE7392E00EDA1FB8DD95BF8D73946EDE635ADAD5C40CDB52EAEAE9BC4C94ABD
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2412

C:\Users\Admin\AppData\Local\Temp\6571.tmp

Filesize
1.9MB

MD5
6ddc7ea1ba09ead70a2f8340e62993ee

SHA1
e064f5a449962acb65816132db8de2d5952ce7e9

SHA256
4f882df28caa5efefafb39df334f80d85ca9b74e937345eb71158209e87d7eeb

SHA512
b6ee23628260dd100b2a97016ec15e8f53172e0eeefd1be65dff934c384a668cf6753b428f16620eb503eba0220d7c308f51634e57b36c45d537793997dbaacc

Download Submit
memory/2304-0-0x0000000000400000-0x00000000005E6000-memory.dmp

Filesize
1.9MB

Download
memory/2412-5-0x0000000000400000-0x00000000005E6000-memory.dmp

Filesize
1.9MB

Download