Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/05/2024, 00:41

General

  • Target

    617c15a2d657f6887a517dbf3b65311f_JaffaCakes118.exe

  • Size

    221KB

  • MD5

    617c15a2d657f6887a517dbf3b65311f

  • SHA1

    7b791c1bb361b507ef603ca9c2d5a10e5409e292

  • SHA256

    1371091d40b82cda9b879720c0315703f9350d76a309ef900c2a965ace995c4d

  • SHA512

    7edc03a70337e3c1d063e8262b2cbaea31e1014f04303b340632f9779ce8a85f8974eeef759b6d17c50c6b9b7aee0da4afd84e9d5b8a3129e46fcf4e815e3bac

  • SSDEEP

    6144:QZhlI2mL82YVnnU4vhgEZV/CsOWrrOef6:QZhbmvY9vhgE3/CsOkrOef6

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\617c15a2d657f6887a517dbf3b65311f_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\617c15a2d657f6887a517dbf3b65311f_JaffaCakes118.exe"
    1⤵
    • Drops file in Windows directory
    PID:1400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1400-2-0x0000000000540000-0x0000000000541000-memory.dmp

    Filesize

    4KB

  • memory/1400-1-0x0000000000530000-0x0000000000531000-memory.dmp

    Filesize

    4KB

  • memory/1400-0-0x0000000000520000-0x0000000000521000-memory.dmp

    Filesize

    4KB

  • memory/1400-3-0x0000000000570000-0x0000000000590000-memory.dmp

    Filesize

    128KB

  • memory/1400-4-0x0000000000560000-0x0000000000561000-memory.dmp

    Filesize

    4KB

  • memory/1400-9-0x0000000000570000-0x0000000000590000-memory.dmp

    Filesize

    128KB

  • memory/1400-5-0x00000000041B0000-0x00000000041DF000-memory.dmp

    Filesize

    188KB

  • memory/1400-17-0x0000000000570000-0x0000000000590000-memory.dmp

    Filesize

    128KB