Analysis

  • max time kernel
    139s
  • max time network
    133s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17-05-2024 20:33

General

  • Target

    515cad08814bb588a7afb4c8bf2a73af_JaffaCakes118.exe

  • Size

    346KB

  • MD5

    515cad08814bb588a7afb4c8bf2a73af

  • SHA1

    5ae7cd5f6193dea97d434706f5b5b645580fef52

  • SHA256

    0d7d830b8322c02e726da5d0d361d433c5590b5046982308ab45a02553501c7b

  • SHA512

    0164007fe2e29dd2f3a2e940c9a511c08e8b47b6a6d9e6bbd444c791d60a9bf7851fc1dec1e9ff0482d317d025ce7281d7b831b053813ce222f4586e6a221abe

  • SSDEEP

    6144:+a8CqyeVBWs/9WwG7jx7irZSnsibajtD83nL5xsiVlqwi:+a8CqRWF7jx7EZSnsi483Nx9owi

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\515cad08814bb588a7afb4c8bf2a73af_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\515cad08814bb588a7afb4c8bf2a73af_JaffaCakes118.exe"
    1⤵
    • Drops file in Windows directory
    PID:212
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4336,i,15140928051103392835,1612840580898364401,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:8
    1⤵
      PID:968

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/212-0-0x0000000000020000-0x0000000000021000-memory.dmp

      Filesize

      4KB

    • memory/212-1-0x0000000000030000-0x0000000000032000-memory.dmp

      Filesize

      8KB

    • memory/212-2-0x00000000001A0000-0x00000000001A1000-memory.dmp

      Filesize

      4KB

    • memory/212-3-0x00000000001B0000-0x00000000001B1000-memory.dmp

      Filesize

      4KB

    • memory/212-4-0x00000000001C0000-0x00000000001C1000-memory.dmp

      Filesize

      4KB

    • memory/212-5-0x0000000000840000-0x000000000087B000-memory.dmp

      Filesize

      236KB

    • memory/212-6-0x0000000000840000-0x000000000087B000-memory.dmp

      Filesize

      236KB

    • memory/212-11-0x0000000000840000-0x000000000087B000-memory.dmp

      Filesize

      236KB

    • memory/212-7-0x0000000000980000-0x00000000009AF000-memory.dmp

      Filesize

      188KB

    • memory/212-24-0x0000000000840000-0x000000000087B000-memory.dmp

      Filesize

      236KB

    • memory/212-20-0x0000000006820000-0x0000000006847000-memory.dmp

      Filesize

      156KB

    • memory/212-27-0x0000000000840000-0x000000000087B000-memory.dmp

      Filesize

      236KB

    • memory/212-26-0x0000000000840000-0x000000000087B000-memory.dmp

      Filesize

      236KB