Analysis
-
max time kernel
119s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
15-04-2024 03:46
General
-
Target
f03b49cf33d83f65d33302cebd124e68_JaffaCakes118.exe
-
Size
82KB
-
MD5
f03b49cf33d83f65d33302cebd124e68
-
SHA1
629b7b4dd47557e02954d7b37ad0681d36597f75
-
SHA256
488d080a6412f1e8bc1ff2489f67700e54fc2c9e68b61465afb2730027560bc5
-
SHA512
69e44db877bc03a7c1c1900673d240c47c4f1fca1e020d4c0262d9aee0fea06fef4214d485f4dccc2cd8e1f2a82fe501ba18d3ddbdcb557a1c2e5fda433efeb6
-
SSDEEP
1536:FvaPIeD6Atd0S9DDm69a7r9+FxK3Cf6ZypyDKi7uWEV3:UPIeDvuc3KSf6MpyfCb
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f03b49cf33d83f65d33302cebd124e68_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f03b49cf33d83f65d33302cebd124e68_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\f03b49cf33d83f65d33302cebd124e68_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\f03b49cf33d83f65d33302cebd124e68_JaffaCakes118.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD556a18cd7bfea9b3154ce7fde601d0ae3
SHA1bc175f90798500c58b791c0fdc31237919de2abb
SHA256cef9fc7fecb73dd3622594a7b7998359a247cfeb8fb9ad24b661a8d43f367a63
SHA512f6ae2d58709d4bbc6c2d8cd5068d5865ad0db10afe81f422d4ff42d0aba26ae9941056bfb3077ff4b7effe065b458158e0e808c06c30600c1a69c264f29eda82
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB