9c7d406369303ff67f47268c86b7ef94fe3a953133c8865bdd5caab09b526f50

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
19/05/2024, 01:03

Target
57c88bc5decb0704871464e6444ab639_JaffaCakes118.exe
Size 167KB
Sample240519-ber7bsaa4v
SHA256 9c7d406369303ff67f47268c86b7ef94fe3a953133c8865bdd5caab09b526f50
MD5 57c88bc5decb0704871464e6444ab639
SHA1 3d153956f9cb278e400d5c1ec8ffb7ceb11fd668
SHA512 c211b054acabfe394416abd23e03e1f9af3be5b48e6f05327eea7aab94103e75479718bff26c7b0867d0bb9a4f7d2dafdbb9499aaa503706d76088807217315a
SSDEEP 3072:qqzle+c1kF3GqzZrJXog9nTjaY70vEslNckApoHVaBXUwPiLJZ:BOkDhJXV9TjaYo8pAYBXUwKL
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
428	57c88bc5decb0704871464e6444ab639_JaffaCakes118.exe
428	57c88bc5decb0704871464e6444ab639_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\57c88bc5decb0704871464e6444ab639_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\57c88bc5decb0704871464e6444ab639_JaffaCakes118.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:428

memory/428-0-0x0000000001960000-0x0000000001CAA000-memory.dmp

Download

memory/428-1-0x0000000001960000-0x0000000001CAA000-memory.dmp

Download