b382d0e1a2144d519e9dfff537474d314b68872665a3c773a56a14e1b2ea271f

Analysis

max time kernel
121s
max time network
122s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
15/04/2024, 02:42

Target
f01d3419a4c2a7e3aab1e392c4c415d4_JaffaCakes118.dll
Size 36KB
Sample240415-c7fvfafc2w
SHA256 b382d0e1a2144d519e9dfff537474d314b68872665a3c773a56a14e1b2ea271f
MD5 f01d3419a4c2a7e3aab1e392c4c415d4
SHA1 44cd7bd3d51f32419a807b510f73beadfe1340a8
SHA512 0e0e6b26c7bb31a58696180c6075f15f557ba87664bc7c20d6fe0fdef0bbbb95ce089f8cd3dd2c1b1b321ee8413e61055e5ff40a4f4369d7b3eb01364f80207b
SSDEEP 192:mfb+RrL+/gKTPY3S6/l8mOaxbdToAGImkeZOizZEcF9r:mfb+Rr6/gKbkS6//OO/mkeZhz1Fl
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
852	regsvr32.exe
852	regsvr32.exe

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\f01d3419a4c2a7e3aab1e392c4c415d4_JaffaCakes118.dll
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:852