Analysis

  • max time kernel
    145s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    10/04/2024, 16:50

General

  • Target

    eb89285ba377d182c95871c3c66f9a14_JaffaCakes118.exe

  • Size

    391KB

  • MD5

    eb89285ba377d182c95871c3c66f9a14

  • SHA1

    fd43fcca5d39de5fda680abef3675c9a85742695

  • SHA256

    42173bc85d4499fead39d7b661f65cc40b7949ed9b0c48b16cb0bc2a07a31686

  • SHA512

    fb30d6f0bc508b0a4f86a1f5c33735cffd4ea6adb95d8396381f398b29bc39c580008bf31238d31a8e2ffcda1abef1d848d83296634a78d95d8a0ed34bc3fa54

  • SSDEEP

    6144:6YEoo/4rnzsBw+EwKEnePrNqhdFvmNpqB/A8/QJQCe2zdRQ0yhmcvZpIwO/igSS:6uHrcYPkePhqpvmaBvYJQCe2I9fq

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 30 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\eb89285ba377d182c95871c3c66f9a14_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\eb89285ba377d182c95871c3c66f9a14_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2240

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2240-0-0x0000000000400000-0x000000000053E000-memory.dmp

          Filesize

          1.2MB

        • memory/2240-1-0x0000000000020000-0x0000000000022000-memory.dmp

          Filesize

          8KB

        • memory/2240-2-0x00000000002C0000-0x00000000002C1000-memory.dmp

          Filesize

          4KB

        • memory/2240-3-0x0000000000400000-0x000000000053E000-memory.dmp

          Filesize

          1.2MB

        • memory/2240-5-0x0000000000020000-0x0000000000022000-memory.dmp

          Filesize

          8KB

        • memory/2240-6-0x00000000002C0000-0x00000000002C1000-memory.dmp

          Filesize

          4KB

        • memory/2240-9-0x0000000000400000-0x000000000053E000-memory.dmp

          Filesize

          1.2MB