Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/05/2024, 16:57

General

  • Target

    407beddb73dc886c785419a4dafaa15a_JaffaCakes118.exe

  • Size

    305KB

  • MD5

    407beddb73dc886c785419a4dafaa15a

  • SHA1

    e8dc64d6a7dd32047f53af4e1fc2d51fc1f5c63b

  • SHA256

    06810f06d76c9d8b3b38a941d22d0c141d9dcab856095c59208030856a226163

  • SHA512

    0e0c1bbca9d95541d678501e8d872517306fa937782413d753d62c66b195ba78d7e507bfd2acfcc1237bfcfabc56b69387f6d928ad8b150ae53ca2b92052b008

  • SSDEEP

    6144:CrVr6Y0JQBkQRl7174NpNUM+UHs+eMGAue/VKi//KRsh3sg1Z:CrVr63yRl1uqM+gs+e9/euRYcg1Z

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\407beddb73dc886c785419a4dafaa15a_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\407beddb73dc886c785419a4dafaa15a_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    PID:2108

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\Tsu50C006C6.dll

    Filesize

    269KB

    MD5

    af7ce801c8471c5cd19b366333c153c4

    SHA1

    4267749d020a362edbd25434ad65f98b073581f1

    SHA256

    cf7e00ba429bc9f27ccfacc49ae367054f40ada6cede9f513cc29a24e88bf49e

    SHA512

    88655bd940e9b540c4df551fe68135793eceed03f94389b0654637a18b252bf4d3ef73b0c49548b5fa6ba2cf6d9aff79335c4ebcc0b668e008bcc62c40d2a73c

  • C:\Users\Admin\AppData\Local\Temp\{91606B45-150C-4EB4-AC5F-5D2E4A8349B3}\Custom.dll

    Filesize

    62KB

    MD5

    3e15e552c1ae8a955bcf6ede52cec47d

    SHA1

    e0a7d81eb177c6ad0cd4e314d914414ec7d11dbe

    SHA256

    d210f4e66e5a8d0ba80dd4f76142976eedbe8c93272cd306ad980686542c0e14

    SHA512

    7cbe709a7f598d206b606d30cd784f828467880bea343930428d07d40ed5e7f4dd76d4e898c71643ec3079c4cf328f7ee9f0a224ca8e5dce8e87ea20f18865b3

  • C:\Users\Admin\AppData\Local\Temp\{91606B45-150C-4EB4-AC5F-5D2E4A8349B3}\_Setup.dll

    Filesize

    166KB

    MD5

    a793e6a8e52f8c84d24f5c8a25fdc82c

    SHA1

    7f3c8d32062e2993b3904332f02dae6ca6c12459

    SHA256

    5a21429f472875aba98a3566459b96cae0eaa0dc788fdb521bcb32bf9d8e5af4

    SHA512

    20ac2720db1c654c68d7dd49db84cafc6af287fb62c7bc464bf449cc168430c9cf7d808032d7feda49fa348affd58f180057b7b42e6424015963da3dcc0d6250