Analysis

  • max time kernel
    147s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/04/2024, 05:38

General

  • Target

    f99e08f0b3cdf72945b029fbfe52892c_JaffaCakes118.exe

  • Size

    739KB

  • MD5

    f99e08f0b3cdf72945b029fbfe52892c

  • SHA1

    0c8914910722c22e454a54ad69c8f391664f3087

  • SHA256

    1e42f7bb4303eb4718c6a3e240865e0cbec428d7139d17447b6d3ed4f68822a5

  • SHA512

    fa8345b5097b33ef2775454ad34e8b73a06a810e409f533841b6f40ea9e4c49f9a2a2fe00737dd73c7deb22da0f30b2619ccdb042a825a28373ab032842012c9

  • SSDEEP

    12288:x1xdSZfjSaXCUrSbEXWvKTobOmuyMNOq8UUgoQ0QovVaBkAyPGlKhhuHa5KFVB1m:xBk7SaX56Ni0b+DNL89LQ8da1Bl4OVm

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtCreateThreadExHideFromDebugger 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f99e08f0b3cdf72945b029fbfe52892c_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\f99e08f0b3cdf72945b029fbfe52892c_JaffaCakes118.exe"
    1⤵
    • Suspicious use of NtCreateThreadExHideFromDebugger
    PID:4592

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4592-0-0x00000000006C0000-0x000000000075F000-memory.dmp

          Filesize

          636KB

        • memory/4592-1-0x00000000006C0000-0x000000000075F000-memory.dmp

          Filesize

          636KB

        • memory/4592-2-0x0000000000400000-0x00000000004C0000-memory.dmp

          Filesize

          768KB