Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    19-05-2024 05:53

General

  • Target

    58dd0631dc5e070ce60ce4258586cbaa_JaffaCakes118.exe

  • Size

    285KB

  • MD5

    58dd0631dc5e070ce60ce4258586cbaa

  • SHA1

    298550d1a1821ba320d926e0529445e669567feb

  • SHA256

    cca94377ac2ba71a0fec12b73f0fbb83194db79e1be9e509b1d0e0e8f3db4fc2

  • SHA512

    d0191ad963cb4af3944a71a187f61b3d719da4bc28f3b1575cee5590253e72f145f746bdb968d079ebced0d96da51f41f3dd9d23fe02b34eebbf2c6fe56283ef

  • SSDEEP

    6144:/9SPfj7w2bhafQEPx96w3KK6cDwSL0JV:/9Snjd1Ev1L0

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\58dd0631dc5e070ce60ce4258586cbaa_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\58dd0631dc5e070ce60ce4258586cbaa_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    PID:2428

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\f91f3622-7a60-4d22-a59e-690a1ce5e78b\AgileDotNetRT.dll
    Filesize

    136KB

    MD5

    9af5eb006bb0bab7f226272d82c896c7

    SHA1

    c2a5bb42a5f08f4dc821be374b700652262308f0

    SHA256

    77dc05a6bda90757f66552ee3f469b09f1e00732b4edca0f542872fb591ed9db

    SHA512

    7badd41be4c1039302fda9bba19d374ec9446ce24b7db33b66bee4ef38180d1abcd666d2aea468e7e452aa1e1565eedfefed582bf1c2fe477a4171d99d48772a

  • memory/2428-0-0x0000000074B21000-0x0000000074B22000-memory.dmp
    Filesize

    4KB

  • memory/2428-1-0x0000000074B20000-0x00000000750CB000-memory.dmp
    Filesize

    5.7MB

  • memory/2428-2-0x0000000074B20000-0x00000000750CB000-memory.dmp
    Filesize

    5.7MB

  • memory/2428-9-0x00000000749A0000-0x00000000749FB000-memory.dmp
    Filesize

    364KB

  • memory/2428-10-0x0000000073E40000-0x0000000073E77000-memory.dmp
    Filesize

    220KB

  • memory/2428-11-0x0000000074B20000-0x00000000750CB000-memory.dmp
    Filesize

    5.7MB

  • memory/2428-12-0x0000000073E40000-0x0000000073E77000-memory.dmp
    Filesize

    220KB