Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
19/04/2024, 01:26
General
-
Target
f932abd7152014a5b1b0fbf283d2fcdf_JaffaCakes118.exe
-
Size
82KB
-
MD5
f932abd7152014a5b1b0fbf283d2fcdf
-
SHA1
28fc81bf93a8198a488ab0a4045b3425b4aef813
-
SHA256
4b0f75e88bbe8eba84f120fbcfaed5310f41ceaa7d8015908dcdf6312366e3a2
-
SHA512
535dbfbfac52499f601cee9bf305dd5e7c1462ba07797155c4709e5038764c2d063b014bd32f828d8ea1d82c2de3a07d5fb4a87e00852a54a7ebe8a524db23f2
-
SSDEEP
1536:kpX8sErlmxUSEL43nmrj76hpAlzPVCeLLAtNjKUMwyY/FEu5r9bHixHw1/xhXlI:kSsE4xZE2nmrjuhClz4eL0/Ot2Eq0wV6
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f932abd7152014a5b1b0fbf283d2fcdf_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f932abd7152014a5b1b0fbf283d2fcdf_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\f932abd7152014a5b1b0fbf283d2fcdf_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\f932abd7152014a5b1b0fbf283d2fcdf_JaffaCakes118.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD573dc48c9bea4699dc06c9e54f090305f
SHA153d24ec4616020ee79e0cbc1ccc0f96505d16ed7
SHA25692eac12407ef4e7de7ae79176ee36e6be632be04e2027183cc474688439fd22d
SHA512cdcc658478847e73cdd1aaf7d4e93a676df67b8898ed5a4bef989bdcef6a8c4d0ddaf6bec5b223f442fca16e56ad2038eb9fcf5d5479edb52650f06188a8d8bd
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
188KB