Analysis
-
max time kernel
93s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
11/04/2024, 02:06
General
-
Target
ec72f0b1053d50af2fbc7febccfafc75_JaffaCakes118.exe
-
Size
200KB
-
MD5
ec72f0b1053d50af2fbc7febccfafc75
-
SHA1
264ed170272b1851a9efec241a514c6143b7b8e5
-
SHA256
e01e913e4958e68f17ea96875b54f53fdbdd3beac059cae002b7c7e02eaf098a
-
SHA512
567b9a3179f8f3aa3ada2d87b5e6554cde61c637786ceb09b998fa35c5b106696c2fbc2794de9b5290252686a591562a893a16fc22e7b4eae9820c28783362ff
-
SSDEEP
3072:P6X2lMM6ERTUDAKWQyIf6/1Bg61Z28nd+/bt68r4AqvNF61+f/FWbH9c:P6mRZtNjI21i61Znd+Dt6e4jvz61+Vyc
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ec72f0b1053d50af2fbc7febccfafc75_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ec72f0b1053d50af2fbc7febccfafc75_JaffaCakes118.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\ec72f0b1053d50af2fbc7febccfafc75_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ec72f0b1053d50af2fbc7febccfafc75_JaffaCakes118.exe"2⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4548 -s 123⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4548 -ip 45481⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
36KB
-
Filesize
4KB
-
Filesize
960KB
-
Filesize
228KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
176KB
-
Filesize
176KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
176KB
-
Filesize
64KB
-
Filesize
960KB
-
Filesize
228KB
-
Filesize
16KB