Analysis
-
max time kernel
3s -
max time network
8s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
18/04/2024, 04:25
Errors
Reason
Machine shutdown
General
-
Target
f7435bd67ee9a97ab46dc6b926abbe89_JaffaCakes118.exe
-
Size
82KB
-
MD5
f7435bd67ee9a97ab46dc6b926abbe89
-
SHA1
42a66ae75a30c46468c002dd3cc45646c919cc34
-
SHA256
c1bcf31b424b4a04a85af3eb75ecf9daf06ff3dea0906d10789c1947fc2f8126
-
SHA512
59060c1709c1fb18b9849c668ee1aedb8738803e37bab929fbf27f8671d6b6c54df163363230471bedd8d4d33372843850e5bb914ac20e768c5e9a0ecb121cde
-
SSDEEP
1536:P8RMrAXsdCkod0ykirXUvc/dvW4aQX7+PkJw7niFQsktdsa0wcmc0:P8Sbd8d0ykirXUklvZbFQ4aT
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f7435bd67ee9a97ab46dc6b926abbe89_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f7435bd67ee9a97ab46dc6b926abbe89_JaffaCakes118.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\f7435bd67ee9a97ab46dc6b926abbe89_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\f7435bd67ee9a97ab46dc6b926abbe89_JaffaCakes118.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD5c3555d43860096db5c3a1a0bda267016
SHA1b0412548a7301ad9e8465a365cf50c12be461dac
SHA256bec3203103ef49d1bca16ea7be7c216ed73a1b45f21091fd1fdb57e91919084d
SHA51293a109ecace701badaff9cc5ebda3025fe8422fe03b6adfa2d6264c226b902e4368ed8993deb6aa8a15d97bf14ff397704909ad6028e88b7afdfa14ba182d1ee
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB