Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
18-04-2024 05:02
General
-
Target
f75117ccc9bf45604d855a9910139a5a_JaffaCakes118.exe
-
Size
57KB
-
MD5
f75117ccc9bf45604d855a9910139a5a
-
SHA1
74b3dd41641823b8ea82eb4c190d3f073fcfe0b7
-
SHA256
233612d012c01d35c67688f5b0ef802102628c8e6a468bba41c8a60e66deae0e
-
SHA512
510dda611f1b09e232290f4c7c86f40077081e3e4c09038eafb87d9c847b7541d80c4a7863c4d12994369ccf6abfbfcb979bc2de791d5f5620c5e820754ef9ba
-
SSDEEP
1536:iZBqzyM1qXGKLjw3ssBZTRNGjU5ypASPxhxJuM91pDB:iZry24NTRNGiymSPxXJu+19B
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f75117ccc9bf45604d855a9910139a5a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f75117ccc9bf45604d855a9910139a5a_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\f75117ccc9bf45604d855a9910139a5a_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\f75117ccc9bf45604d855a9910139a5a_JaffaCakes118.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
57KB
MD544ff03b9074fb920f49dfd08a1c64854
SHA1a25ffef1730d75a1d2e58f44869866c174b9ca3f
SHA256f52bd22c6bc192f05c3bb5c86148efd896d9b7711dd205bbb353ea7d0e5acf2b
SHA512b843f510b72413b0184abb2a003c4f6eeda11264f5846d53eb7cd018c5464c5f4c82963b58c3f8d0d8e064dbd9804b81ab09bc52aa9dc0e8e53923fd9a2026b0
-
Filesize
176KB
-
Filesize
108KB
-
Filesize
176KB
-
Filesize
176KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
176KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
176KB