Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-05-2024 05:53

General

  • Target

    58dd0631dc5e070ce60ce4258586cbaa_JaffaCakes118.exe

  • Size

    285KB

  • MD5

    58dd0631dc5e070ce60ce4258586cbaa

  • SHA1

    298550d1a1821ba320d926e0529445e669567feb

  • SHA256

    cca94377ac2ba71a0fec12b73f0fbb83194db79e1be9e509b1d0e0e8f3db4fc2

  • SHA512

    d0191ad963cb4af3944a71a187f61b3d719da4bc28f3b1575cee5590253e72f145f746bdb968d079ebced0d96da51f41f3dd9d23fe02b34eebbf2c6fe56283ef

  • SSDEEP

    6144:/9SPfj7w2bhafQEPx96w3KK6cDwSL0JV:/9Snjd1Ev1L0

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\58dd0631dc5e070ce60ce4258586cbaa_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\58dd0631dc5e070ce60ce4258586cbaa_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    PID:1608

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\f91f3622-7a60-4d22-a59e-690a1ce5e78b\AgileDotNetRT.dll
    Filesize

    136KB

    MD5

    9af5eb006bb0bab7f226272d82c896c7

    SHA1

    c2a5bb42a5f08f4dc821be374b700652262308f0

    SHA256

    77dc05a6bda90757f66552ee3f469b09f1e00732b4edca0f542872fb591ed9db

    SHA512

    7badd41be4c1039302fda9bba19d374ec9446ce24b7db33b66bee4ef38180d1abcd666d2aea468e7e452aa1e1565eedfefed582bf1c2fe477a4171d99d48772a

  • memory/1608-0-0x00000000754D2000-0x00000000754D3000-memory.dmp
    Filesize

    4KB

  • memory/1608-1-0x00000000754D0000-0x0000000075A81000-memory.dmp
    Filesize

    5.7MB

  • memory/1608-2-0x00000000754D0000-0x0000000075A81000-memory.dmp
    Filesize

    5.7MB

  • memory/1608-11-0x00000000741F0000-0x000000007424B000-memory.dmp
    Filesize

    364KB

  • memory/1608-10-0x00000000739D0000-0x0000000073A07000-memory.dmp
    Filesize

    220KB

  • memory/1608-13-0x00000000754D0000-0x0000000075A81000-memory.dmp
    Filesize

    5.7MB

  • memory/1608-14-0x00000000739D0000-0x0000000073A07000-memory.dmp
    Filesize

    220KB