ac738a28e64fd24a7c3a4bb335fcf5c76b2f6e4683fdb108f7767857a10955af

Analysis

max time kernel
160s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
04/04/2024, 20:54

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
Size

221KB
MD5

c27f9ef19dda68ec27cafbe1e68c1f3d
SHA1

cee3083f0f91d143f59c92468b91db20a57bbec5
SHA256

ac738a28e64fd24a7c3a4bb335fcf5c76b2f6e4683fdb108f7767857a10955af
SHA512

b519dc28d76a9ef601a3779062461b3e73925cd37ad779da642515040e48fe454a0d2b5cf06711d7919f3fd334b3618e4eafa66ee13e1b9a74b201c637d624ca
SSDEEP

3072:FLhgj1KiLc3OIkSCiuYyIyu99eQH6v5pBzD05y5zU7H/Gv+hkkzb:FVa1KiLu/knijyIZ9V6v5jo5y5afIkzb

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
1056	c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\c27f9ef19dda68ec27cafbe1e68c1f3d_JaffaCakes118.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1056-0-0x0000000000C30000-0x0000000000CD1000-memory.dmp

Filesize
644KB

Download
memory/1056-1-0x0000000000550000-0x0000000000552000-memory.dmp

Filesize
8KB

Download
memory/1056-2-0x0000000000C30000-0x0000000000CD1000-memory.dmp

Filesize
644KB

Download
memory/1056-5-0x0000000000C30000-0x0000000000CD1000-memory.dmp

Filesize
644KB

Download
memory/1056-6-0x0000000000C30000-0x0000000000CD1000-memory.dmp

Filesize
644KB

Download
memory/1056-7-0x0000000000550000-0x0000000000552000-memory.dmp

Filesize
8KB

Download
memory/1056-8-0x0000000000C30000-0x0000000000CD1000-memory.dmp

Filesize
644KB

Download
memory/1056-9-0x0000000000C30000-0x0000000000CD1000-memory.dmp

Filesize
644KB

Download
memory/1056-10-0x0000000000C30000-0x0000000000CD1000-memory.dmp

Filesize
644KB

Download
memory/1056-11-0x0000000000C30000-0x0000000000CD1000-memory.dmp

Filesize
644KB

Download
memory/1056-12-0x0000000000C30000-0x0000000000CD1000-memory.dmp

Filesize
644KB

Download
memory/1056-13-0x0000000000C30000-0x0000000000CD1000-memory.dmp

Filesize
644KB

Download
memory/1056-14-0x0000000000C30000-0x0000000000CD1000-memory.dmp

Filesize
644KB

Download
memory/1056-15-0x0000000000C30000-0x0000000000CD1000-memory.dmp

Filesize
644KB

Download
memory/1056-16-0x0000000000C30000-0x0000000000CD1000-memory.dmp

Filesize
644KB

Download
memory/1056-17-0x0000000000C30000-0x0000000000CD1000-memory.dmp

Filesize
644KB

Download
memory/1056-18-0x0000000000C30000-0x0000000000CD1000-memory.dmp

Filesize
644KB

Download
memory/1056-19-0x0000000000C30000-0x0000000000CD1000-memory.dmp

Filesize
644KB

Download