Analysis

  • max time kernel
    140s
  • max time network
    103s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/05/2024, 13:40

General

  • Target

    0ea7ae8c43e28344bf7f6379c6e58a74_JaffaCakes118.exe

  • Size

    3.8MB

  • MD5

    0ea7ae8c43e28344bf7f6379c6e58a74

  • SHA1

    6ace856798d8a42ead1d91af4e70add4aac39999

  • SHA256

    8dec0ad17518e736bb7f9ee9f2230fe678190dd96482fbb579b9e5885c4633e8

  • SHA512

    148da2f1000c6142f448799bc81176f26849088187e0a7b80ca803b79d4ee20dc840b8cd830c02d9bf7b9ac1cd9af00a270056a5c8e7a1cf6bdcae641621c528

  • SSDEEP

    98304:4/HdRKpsPd16rtnvmED+c0Bi0KHIfhOP+e:4/9RyE8tnvbyBi2J6

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Drops file in System32 directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0ea7ae8c43e28344bf7f6379c6e58a74_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\0ea7ae8c43e28344bf7f6379c6e58a74_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    PID:4756

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\GLC3383.tmp

          Filesize

          156KB

          MD5

          7b4571f62cac828b19e77d2a048a3501

          SHA1

          f1a20a73802d437882596e11a8478ac67951cd73

          SHA256

          6a21254f3840e3029598a7fd018f685772646a9f657ce13d98a6af8e76915626

          SHA512

          29f4ec3e46a91dd57b3328c1744eba5e4cd8f48bf9b91328bc89692d0cb722e9b84516d9854b17b98ff8ea8604f07fbc81afe9ae0ccd59afdb74a4692d546e37

        • C:\Users\Admin\AppData\Local\Temp\GLK35A8.tmp

          Filesize

          30KB

          MD5

          3df61e5730883b2d338addd7acbe4bc4

          SHA1

          03166e6230231e7e3583cf9c8944f4967aa1bf1b

          SHA256

          2efe9a54c8eb878711d9b6cd18f276838645aff52fe69d8a864376cb258ec616

          SHA512

          36e9d705d22dad3d952b4da578a990f2b63ec2f9fbf2734efdaea9ecbd4f07a8d7232792eb5bdd81c553354d51334993cb6103c377f3483a680eac9e41cd2087