Analysis

  • max time kernel
    150s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/04/2024, 05:34

General

  • Target

    dc82b95bc77bd7adf65a776e2252a799_JaffaCakes118.exe

  • Size

    90KB

  • MD5

    dc82b95bc77bd7adf65a776e2252a799

  • SHA1

    45bff1aecaaee83e46b00546c1547f9ec00130db

  • SHA256

    ca3a63446d2d40562b1f0ec100d29effb5a004e747c3ac0236f6e8eb9c63a93a

  • SHA512

    6c43ac9aa64c4e482fcb181675689366a72c4d06b8165f42d2b558543d63428f9e7d3a6caf91770928e87c6bb7769a03f766507d7428b26d9c02b1ab2f3c34dd

  • SSDEEP

    1536:NdF6Y9JIXfLrhoCQISaS86P9cPGK7v4Bv1HQ2YmK:NR2FoCQaS8y9cPz4BvFQH

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 2 IoCs
  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\dc82b95bc77bd7adf65a776e2252a799_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\dc82b95bc77bd7adf65a776e2252a799_JaffaCakes118.exe"
    1⤵
    • Drops file in System32 directory
    • Drops file in Program Files directory
    PID:4180
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3240 --field-trial-handle=2588,i,4353937220825226770,7138584070663735671,262144 --variations-seed-version /prefetch:8
    1⤵
      PID:412

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\Windows\SysWOW64\UsaShohdi.asu

            Filesize

            90KB

            MD5

            a6bf392e65fafb41cf9d2730e131bc8d

            SHA1

            533fb00e00d775dfc34613c43134ece06eff22b1

            SHA256

            7df75c216cf38121a016c946eca3e6ab971ff997e6b2dbf546048f6948d2f44c

            SHA512

            3a976d027c725653ddd10df49fe843f1859db31509472b755837acc754ef513ef5eb8c938c9d103e7425edcdf5aef3632020d9fd10f0ed9a0a724cc748ed0446