eebcf041df3295f6419e7df674c214bb8bb6a5a172fe2595e8253fdb8d5a687b

Analysis

max time kernel
147s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240319-en
resource tags

arch:x64arch:x86image:win10v2004-20240319-enlocale:en-usos:windows10-2004-x64system
submitted
05-04-2024 14:42

Target

d6a0cc984e26284450ad55e61a1fd0ac_JaffaCakes118.dll
Size

126KB
MD5

d6a0cc984e26284450ad55e61a1fd0ac
SHA1

f594d19c789ef7e629b1b68e4dd59662d09f4a80
SHA256

eebcf041df3295f6419e7df674c214bb8bb6a5a172fe2595e8253fdb8d5a687b
SHA512

329e5c2b001b2ec4685df7dd7c3414976c09fa33e099091e7b18a2598cef6b71723255822d1e2da46d276aabce5acd35ff56a987a330dc8a8889309a389c1c00
SSDEEP

3072:taqYCX37kvgdR4+5wrdtEo5YAEMOO/wI:tJbkYdRJ+rIo5ZOOYI

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4172	rundll32.exe
4172	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\d6a0cc984e26284450ad55e61a1fd0ac_JaffaCakes118.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4172

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3252 --field-trial-handle=3408,i,16599691418790971742,134777455365707676,262144 --variations-seed-version /prefetch:8
1⤵
PID:5012