Overview

overview

7

Static

static

3

bcfbd6db4f...18.exe

windows7-x64

7

bcfbd6db4f...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/04/2024, 16:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bcfbd6db4f720922a476b74b1ddeec43_JaffaCakes118.exe

  • Size

    1.9MB

  • MD5

    bcfbd6db4f720922a476b74b1ddeec43

  • SHA1

    d547f131c6b56ebff695cd65e10ecb6548fa5c3a

  • SHA256

    8572a8b421f62fd581cbb88cfabcaa057ff2605d257fe1ea5fe636fe166f77f2

  • SHA512

    2e8b6b7eb6bf9719cd39c5a728ac60b96de8296ce6177a9c765c43fdbb798132f2053e84a486af2d46f1b2454568523735406eacb98e6730131e5ff663047560

  • SSDEEP

    49152:Qoa1taC070dD2pwT7WAFyWSBBpnt1kYMD2Kip2/r:Qoa1taC0/Iy9npnt1dM5ip8r

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bcfbd6db4f720922a476b74b1ddeec43_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\bcfbd6db4f720922a476b74b1ddeec43_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2320
    • C:\Users\Admin\AppData\Local\Temp\23F5.tmp
      "C:\Users\Admin\AppData\Local\Temp\23F5.tmp" --splashC:\Users\Admin\AppData\Local\Temp\bcfbd6db4f720922a476b74b1ddeec43_JaffaCakes118.exe A065217A1905DB6C1E5F00BF690796766B4081117BDA20890248444162BA272CE6D7F2CBDC235EC89EB9AD2F5BAE85D00FFBCAE342C227A81C07418F94CDC0D9
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2856

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\23F5.tmp
    Filesize

    1.9MB

    MD5

    87cb52a843a35409a96a6e88cb8d2d53

    SHA1

    839d94f43de35f8ab022341ec6ea8421065ca42b

    SHA256

    627dee91fe56bdf682c2320b1a338c4c54d01bad0601d50de3d2b45d9bb6a4eb

    SHA512

    95ea63adf86ce7dc522cf1009533205457a27af8dd783469a470399645ecc7e7b3930fd7a5eecbe7f9735fc50ea12a5ef3f45fd314879172ccba99674e22245f

    Download Submit

  • memory/2320-0-0x0000000000400000-0x00000000005E6000-memory.dmp

    Filesize

    1.9MB

    Download

  • memory/2856-6-0x0000000000400000-0x00000000005E6000-memory.dmp

    Filesize

    1.9MB

    Download