Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
18/04/2024, 05:02
General
-
Target
f75117ccc9bf45604d855a9910139a5a_JaffaCakes118.exe
-
Size
57KB
-
MD5
f75117ccc9bf45604d855a9910139a5a
-
SHA1
74b3dd41641823b8ea82eb4c190d3f073fcfe0b7
-
SHA256
233612d012c01d35c67688f5b0ef802102628c8e6a468bba41c8a60e66deae0e
-
SHA512
510dda611f1b09e232290f4c7c86f40077081e3e4c09038eafb87d9c847b7541d80c4a7863c4d12994369ccf6abfbfcb979bc2de791d5f5620c5e820754ef9ba
-
SSDEEP
1536:iZBqzyM1qXGKLjw3ssBZTRNGjU5ypASPxhxJuM91pDB:iZry24NTRNGiymSPxXJu+19B
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f75117ccc9bf45604d855a9910139a5a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f75117ccc9bf45604d855a9910139a5a_JaffaCakes118.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\f75117ccc9bf45604d855a9910139a5a_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\f75117ccc9bf45604d855a9910139a5a_JaffaCakes118.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
57KB
MD56815def0ea471b3233f424eb548222ea
SHA10e0730e6609e21ea1b81d36e1cb14f7968169348
SHA2566ce715d5950c12626b7b27209fcd620959f16a6d2968c94b84fcc6c19bb6285b
SHA512734443f13fdb378e88a1e7be773c37f46a6a7972ffb15280a6f5b53e58c8706852692b134d4cfaa405c914f133fdf159ff2af518f3d862f0a90f6bf231870079
-
Filesize
176KB
-
Filesize
176KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
56KB
-
Filesize
176KB
-
Filesize
176KB
-
Filesize
176KB
-
Filesize
108KB
-
Filesize
108KB