Overview

overview

7

Static

static

3

f9caa4414f...18.exe

windows7-x64

7

f9caa4414f...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    19/04/2024, 07:20

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    f9caa4414f63f52681dcdda094a4d7a8_JaffaCakes118.exe

  • Size

    1.8MB

  • MD5

    f9caa4414f63f52681dcdda094a4d7a8

  • SHA1

    991b9525019027b4ea4db8ba114d7e425c3fcec7

  • SHA256

    9fcd3661ea16eae42a6dcf8caaef9b5f95a514ad6f33886becce9bb2efe1f944

  • SHA512

    2ca396e16c588eaabd315ade02e89936ab36bfa0e62e344f1e34c232d62774819b26ef3663a32ad7bc645d887948503e0c2a9fec183d195b467c8117e8a99641

  • SSDEEP

    24576:x42AQyHO616dvCol35/5TQyHL4KiiVnEWwNmTo9PLoPVEY6lm2T5KVYj7lrJE6Aw:x4kJdvCEph1iiwH9PkPElFJE6Amj2a1

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Drops file in System32 directory 1 IoCs
  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f9caa4414f63f52681dcdda094a4d7a8_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\f9caa4414f63f52681dcdda094a4d7a8_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    • Drops file in Windows directory
    PID:2088

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\GLC16DB.tmp
          Filesize

          157KB

          MD5

          fbd929bfc7b4a9e4fa4506655bab4c4a

          SHA1

          b4df84de80729a04ed90dc976a3e730a568f24f8

          SHA256

          adf8dea5d36b58cf621e2bb0c4549f94e0919308dd7cc1215d942417c45e54a4

          SHA512

          b310e79848dc2a3c6a4524e0b120e2e3dd73ecb6852c65a9eec368045f7bab0b141210726476dd3cb0c1d9008e1f34149f35c03a0156a9eef7d4a7fbc61ea1b4

          Download Submit

        • \Users\Admin\AppData\Local\Temp\GLK16EB.tmp
          Filesize

          30KB

          MD5

          3df61e5730883b2d338addd7acbe4bc4

          SHA1

          03166e6230231e7e3583cf9c8944f4967aa1bf1b

          SHA256

          2efe9a54c8eb878711d9b6cd18f276838645aff52fe69d8a864376cb258ec616

          SHA512

          36e9d705d22dad3d952b4da578a990f2b63ec2f9fbf2734efdaea9ecbd4f07a8d7232792eb5bdd81c553354d51334993cb6103c377f3483a680eac9e41cd2087

          Download Submit