Analysis

  • max time kernel
    133s
  • max time network
    126s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/05/2024, 02:37

General

  • Target

    4920dc560685c425f512bfb271eec79b_JaffaCakes118.exe

  • Size

    319KB

  • MD5

    4920dc560685c425f512bfb271eec79b

  • SHA1

    47702658c8cbfddc41625def9a81254578f44e45

  • SHA256

    fb82c8dfc6f8977926a196173f34a293559ddcd13faadf172f171f88adfa906c

  • SHA512

    5adf071765ed7f6fab0e81f9377fb87aeb4cc84cb67f0fc7b418facfa0c9512a01a8166fdb787567ecbbe379678c49a54e292f23fbedf1347685e29646504d7d

  • SSDEEP

    6144:l6bOCI+3LpVQm40baVxCR79mj+E2PB3/LlN7P5u:lQOCvFVQTOaVxCR7caHPlD5u

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4920dc560685c425f512bfb271eec79b_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\4920dc560685c425f512bfb271eec79b_JaffaCakes118.exe"
    1⤵
    • Drops file in Windows directory
    PID:4140

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4140-0-0x00000000000D0000-0x0000000000102000-memory.dmp

    Filesize

    200KB

  • memory/4140-5-0x00000000000D0000-0x0000000000102000-memory.dmp

    Filesize

    200KB

  • memory/4140-1-0x0000000000880000-0x00000000008AF000-memory.dmp

    Filesize

    188KB

  • memory/4140-10-0x0000000001720000-0x0000000001747000-memory.dmp

    Filesize

    156KB

  • memory/4140-14-0x00000000000D0000-0x0000000000102000-memory.dmp

    Filesize

    200KB

  • memory/4140-19-0x00000000000D0000-0x0000000000102000-memory.dmp

    Filesize

    200KB

  • memory/4140-21-0x00000000000D0000-0x0000000000102000-memory.dmp

    Filesize

    200KB