Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
20-04-2024 07:20
General
-
Target
fc39e67a065a3fcc4a50efee2acbd2d2_JaffaCakes118.exe
-
Size
82KB
-
MD5
fc39e67a065a3fcc4a50efee2acbd2d2
-
SHA1
b336c465f405d7831814c3b2f5fe76d4602b97ba
-
SHA256
aed1f62ea048aee8c07966680b63c0413c322acd6e639af69ae7dbeb205bddea
-
SHA512
3f517f746103c333089e947a680a331e9b5dd4e47080f67ec3eed5f25d977dd07ff98bd94b74fe7de843a3e2673aaa67a95abeaceaa1d432d5ffcbaff13bbb52
-
SSDEEP
1536:l5NBHlQUqdBP/BTicXMqejJFmfqeDj4T6sL2Xl5xF4eyrza:LHlQjjSJIfqehsL0X0i
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fc39e67a065a3fcc4a50efee2acbd2d2_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\fc39e67a065a3fcc4a50efee2acbd2d2_JaffaCakes118.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\fc39e67a065a3fcc4a50efee2acbd2d2_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\fc39e67a065a3fcc4a50efee2acbd2d2_JaffaCakes118.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD5be21966db4a526c3ce20c4aff89fdd5f
SHA1b323aa2bf16da8360a6fcf310f80c33f57c36992
SHA2562b9416403ce9ba91379c80edd7825fd9fe2c7c3db8f376cded58e4a67caef940
SHA51276c22ff683346c3ca31cdee777517cbeee7c91afc3db5652843239a29abfc61345da914e1f0b4e7b376ca700c8b7df8040d3df0c95cf54b27709457cd75beda4
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB