Analysis

  • max time kernel
    114s
  • max time network
    123s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/05/2024, 08:41

General

  • Target

    3e9cfdc747c2401b016f48f2a01a8e4a_JaffaCakes118.exe

  • Size

    226KB

  • MD5

    3e9cfdc747c2401b016f48f2a01a8e4a

  • SHA1

    cf9b9dede615a6ac28b682abb4f7a0e6660fa37c

  • SHA256

    103dda10758b91fb89bbb23ae3269f27651a6fefd573abd75512f1df44d6bddd

  • SHA512

    fd217d257108a0659431852d9b781060163075b224b10bbaf7c826c516c36d377e317c98e7b3653fc62a9893e2ef15ae6f163f7667d53b7aaa57e1491fa83a5a

  • SSDEEP

    3072:Z772md2CzG7eBrOCYDo3QnB+yxByDXJS4BnKoZsg6B4jnGLf05ZqM/Bcim/:lpdxGmrOCXyADXJdNK5vEGLMZtBciU

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3e9cfdc747c2401b016f48f2a01a8e4a_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\3e9cfdc747c2401b016f48f2a01a8e4a_JaffaCakes118.exe"
    1⤵
    • Drops file in Windows directory
    PID:2148
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=2660 --field-trial-handle=2244,i,11878111470816612087,2265290141962607370,262144 --variations-seed-version /prefetch:8
    1⤵
      PID:2976

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/2148-2-0x0000000000600000-0x0000000000601000-memory.dmp

            Filesize

            4KB

          • memory/2148-1-0x00000000003F0000-0x00000000003F1000-memory.dmp

            Filesize

            4KB

          • memory/2148-0-0x00000000003E0000-0x00000000003E1000-memory.dmp

            Filesize

            4KB

          • memory/2148-3-0x0000000000610000-0x0000000000611000-memory.dmp

            Filesize

            4KB

          • memory/2148-4-0x0000000000620000-0x0000000000621000-memory.dmp

            Filesize

            4KB

          • memory/2148-5-0x0000000000630000-0x0000000000650000-memory.dmp

            Filesize

            128KB

          • memory/2148-10-0x0000000000630000-0x0000000000650000-memory.dmp

            Filesize

            128KB

          • memory/2148-6-0x0000000000820000-0x000000000084F000-memory.dmp

            Filesize

            188KB

          • memory/2148-18-0x0000000000630000-0x0000000000650000-memory.dmp

            Filesize

            128KB