Analysis
-
max time kernel
147s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
15-04-2024 20:53
General
-
Target
f1e736c54a95ee90f684c9c9a4f0f0b3_JaffaCakes118.exe
-
Size
162KB
-
MD5
f1e736c54a95ee90f684c9c9a4f0f0b3
-
SHA1
fa2b2dfe8f242b9603c03cfea5eef52c66af6b1e
-
SHA256
b8aee91e10d9b13e1ef384a7cd58ac604eb104ec5d8f74110db6bc125726b967
-
SHA512
3f27273cb9d7410649f100c25f5138e571aed5e5cc1b3a60f27ce17b633ed25dad1e4d9685ffb0cd49d2e12eb1c3f2c2aa6a6c875f289e129b2bfc71634889ef
-
SSDEEP
3072:bOmGftMUYqK1+pJWEA/erG9aTT5z/wteJUXvNK+T/b8bITU02MJ2:6D6qKAWEdgSLwteevNKGD8UU0RJ2
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f1e736c54a95ee90f684c9c9a4f0f0b3_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f1e736c54a95ee90f684c9c9a4f0f0b3_JaffaCakes118.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\f1e736c54a95ee90f684c9c9a4f0f0b3_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\f1e736c54a95ee90f684c9c9a4f0f0b3_JaffaCakes118.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
162KB
MD5757c428d1fc387310668b77887dad759
SHA119f19c2554e51e3ed3fe6671a4aa505cbc14c0fb
SHA2569c10bd3ede8d2a6f4e9ca9d30d5e739474942e70d4394e7d3a7f18dd370918a9
SHA512df1fbdcad9bb0c93b83ada79953d7899315eb9b669e63d87fd12cbcec8c4c477d21828c7be02530f8bbf258dfb4a9b5454b0e1fb0437af6d273c2d6bc0a1d460
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
108KB
-
Filesize
56KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
108KB
-
Filesize
108KB