Analysis

  • max time kernel
    149s
  • max time network
    116s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/04/2024, 11:54

General

  • Target

    f7eff1beb63da419317c88f6fba49701_JaffaCakes118.exe

  • Size

    641KB

  • MD5

    f7eff1beb63da419317c88f6fba49701

  • SHA1

    92b624fcf249480726c61ecb7558cca7a91002a7

  • SHA256

    c3ba4cacc4ca9b93910639d2144c78403215d1fe303a6821b643a263605d8ae0

  • SHA512

    ce5a73bbc926cfd21e91ef110e53aff1d165f018546037c393aa9ffcaf1691c34a6fff1b391155d8bcaaa09787ea7a9013e3ea6397d94101ca906e8f555aa0a0

  • SSDEEP

    12288:vb5V9mB1grTQyiFTHFvNZKDs8cZRpqGjm2K010fB:NV9c67iFTlv+5cjtHK010f

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: RenamesItself 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f7eff1beb63da419317c88f6fba49701_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\f7eff1beb63da419317c88f6fba49701_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: RenamesItself
    PID:3708

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3708-0-0x0000000000400000-0x00000000004C4000-memory.dmp

    Filesize

    784KB

  • memory/3708-1-0x00000000005F0000-0x00000000005F2000-memory.dmp

    Filesize

    8KB

  • memory/3708-4-0x0000000000400000-0x00000000004C4000-memory.dmp

    Filesize

    784KB

  • memory/3708-5-0x00000000006A0000-0x00000000006A2000-memory.dmp

    Filesize

    8KB