Analysis

  • max time kernel
    3s
  • max time network
    7s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/04/2024, 02:29

Errors

Reason
Machine shutdown

General

  • Target

    f714039d6218d62c29f36d420caee373_JaffaCakes118.exe

  • Size

    2.0MB

  • MD5

    f714039d6218d62c29f36d420caee373

  • SHA1

    8169dc7208dd5da9483f88eb08f32033ac5e2bff

  • SHA256

    542208b64cbce25252292e49298676cc4206905eb8ac3f4b12c7d6c1eb9c6fe8

  • SHA512

    7027ec88c652d0b4cda113338ba1e7a8dbca80edc007cde5ce916b30947a991bd74c966dfc1017d539d670f37595f862365a4b69aaa2c0300bb70f4f3eaaaa00

  • SSDEEP

    24576:+7QFRUm/rCYAj8pXU+Cz/rV1K/CYAj8pXU+Cz/rV1H:EQFRHrmQG+yrV1K/mQG+yrV1H

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\f714039d6218d62c29f36d420caee373_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\f714039d6218d62c29f36d420caee373_JaffaCakes118.exe"
    1⤵
      PID:3556
      • C:\Users\Admin\AppData\Local\Temp\xnty.exe
        C:\Users\Admin\AppData\Local\Temp\xnty.exe -run C:\Users\Admin\AppData\Local\Temp\f714039d6218d62c29f36d420caee373_JaffaCakes118.exe
        2⤵
          PID:1948

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\AppData\Local\Temp\xnty.exe

        Filesize

        256KB

        MD5

        ffeb8b0490cbbfe01ef8e71d9e3a6796

        SHA1

        313aee4ae31dc04241e0917420c073a05540e6ba

        SHA256

        451d9b872f6f426444924d9713b2876a1965bbd47fcd67960715cad1a8bce1a2

        SHA512

        efcb301efb5c2d0d567077e3bc980aeb41a46530b7e5a7a1c6114aa4b9edd5c12b1ec7d3300c63869a00cbeee085acd25babcd56652467234ca5315068b44cb8

      • C:\Users\Admin\AppData\Local\Temp\xnty.exe

        Filesize

        896KB

        MD5

        957cf841e0a4028e204290cf3933fd0b

        SHA1

        2227b6ae84d29d82362e2e23b80ecfd11593f4d3

        SHA256

        db78b6a49ee472511ad17db994452ad864bedf15d43672f9cc6cb75a732a944b

        SHA512

        87dec3812ded4e98b29ee4f1e1ac510e3ed7f7ddcf57677fdd10a35cac81c6be2de489c6a2f906b00c6b6161cd57edecc9e25dd0bd6dcce73fbd1c620066458e

      • memory/3556-19-0x0000000002530000-0x0000000002531000-memory.dmp

        Filesize

        4KB

      • memory/3556-20-0x0000000002540000-0x0000000002541000-memory.dmp

        Filesize

        4KB

      • memory/3556-5-0x0000000002330000-0x0000000002331000-memory.dmp

        Filesize

        4KB

      • memory/3556-4-0x00000000022B0000-0x00000000022B1000-memory.dmp

        Filesize

        4KB

      • memory/3556-6-0x00000000022A0000-0x00000000022A1000-memory.dmp

        Filesize

        4KB

      • memory/3556-7-0x0000000002320000-0x0000000002321000-memory.dmp

        Filesize

        4KB

      • memory/3556-8-0x0000000002360000-0x0000000002361000-memory.dmp

        Filesize

        4KB

      • memory/3556-9-0x0000000002D70000-0x0000000002D71000-memory.dmp

        Filesize

        4KB

      • memory/3556-10-0x0000000002340000-0x0000000002341000-memory.dmp

        Filesize

        4KB

      • memory/3556-12-0x0000000002D60000-0x0000000002D62000-memory.dmp

        Filesize

        8KB

      • memory/3556-21-0x00000000025E0000-0x00000000025E1000-memory.dmp

        Filesize

        4KB

      • memory/3556-15-0x00000000024D0000-0x00000000024D1000-memory.dmp

        Filesize

        4KB

      • memory/3556-14-0x00000000024E0000-0x00000000024E1000-memory.dmp

        Filesize

        4KB

      • memory/3556-16-0x0000000002500000-0x0000000002501000-memory.dmp

        Filesize

        4KB

      • memory/3556-17-0x00000000024C0000-0x00000000024C1000-memory.dmp

        Filesize

        4KB

      • memory/3556-18-0x00000000024F0000-0x00000000024F1000-memory.dmp

        Filesize

        4KB

      • memory/3556-2-0x0000000002350000-0x0000000002351000-memory.dmp

        Filesize

        4KB

      • memory/3556-0-0x0000000000400000-0x0000000000536000-memory.dmp

        Filesize

        1.2MB

      • memory/3556-13-0x0000000002520000-0x0000000002521000-memory.dmp

        Filesize

        4KB

      • memory/3556-22-0x00000000025A0000-0x00000000025A1000-memory.dmp

        Filesize

        4KB

      • memory/3556-23-0x0000000002590000-0x0000000002591000-memory.dmp

        Filesize

        4KB

      • memory/3556-24-0x00000000025C0000-0x00000000025C1000-memory.dmp

        Filesize

        4KB

      • memory/3556-25-0x0000000002570000-0x0000000002571000-memory.dmp

        Filesize

        4KB

      • memory/3556-26-0x00000000025B0000-0x00000000025B1000-memory.dmp

        Filesize

        4KB

      • memory/3556-27-0x00000000025D0000-0x00000000025D1000-memory.dmp

        Filesize

        4KB

      • memory/3556-28-0x0000000002D50000-0x0000000002D56000-memory.dmp

        Filesize

        24KB

      • memory/3556-29-0x0000000002E20000-0x0000000002F20000-memory.dmp

        Filesize

        1024KB

      • memory/3556-31-0x0000000002E20000-0x0000000002F20000-memory.dmp

        Filesize

        1024KB

      • memory/3556-33-0x0000000002E20000-0x0000000002F20000-memory.dmp

        Filesize

        1024KB

      • memory/3556-3-0x00000000022C0000-0x00000000022C1000-memory.dmp

        Filesize

        4KB

      • memory/3556-1-0x00000000022D0000-0x0000000002320000-memory.dmp

        Filesize

        320KB

      • memory/3556-36-0x0000000002E20000-0x0000000002E21000-memory.dmp

        Filesize

        4KB

      • memory/3556-38-0x0000000000400000-0x0000000000536000-memory.dmp

        Filesize

        1.2MB

      • memory/3556-37-0x0000000002E20000-0x0000000002E21000-memory.dmp

        Filesize

        4KB