Analysis

  • max time kernel
    138s
  • max time network
    162s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/05/2024, 21:51

General

  • Target

    6fe6fa0d924ad27f3fa3b7b631ff89a5_JaffaCakes118.exe

  • Size

    134KB

  • MD5

    6fe6fa0d924ad27f3fa3b7b631ff89a5

  • SHA1

    c8c9ec7d31015d7ae1e4c17319cb29d6693de468

  • SHA256

    38261361579a2f1d75cf10463dfa940b5d74892fa8db1bacdc2ffcd6c75031e4

  • SHA512

    f518c85ba3c921b7f8010797a170db414e4a654a72168ba5fde782609ab53db3661c80b5186b4e141b4d2061af475f23b5a67149bc50cc89d4daa6dd2355fa5d

  • SSDEEP

    3072:1xTqpdA3f6QNf2IPO4DpmWpAsfYbTOBoefYi6a9k20tAvscwg8R4n:v2pdqfv2IPOGfXf5ovWv7OR4n

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6fe6fa0d924ad27f3fa3b7b631ff89a5_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\6fe6fa0d924ad27f3fa3b7b631ff89a5_JaffaCakes118.exe"
    1⤵
    • Drops file in Windows directory
    PID:3232
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3700 --field-trial-handle=2272,i,4858140932023865871,5726683989663339295,262144 --variations-seed-version /prefetch:8
    1⤵
      PID:3228

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Windows\Temp\CKY3 - Bam Margera World Industries Alien Workshop Full Downloader.exe

      Filesize

      134KB

      MD5

      6fe6fa0d924ad27f3fa3b7b631ff89a5

      SHA1

      c8c9ec7d31015d7ae1e4c17319cb29d6693de468

      SHA256

      38261361579a2f1d75cf10463dfa940b5d74892fa8db1bacdc2ffcd6c75031e4

      SHA512

      f518c85ba3c921b7f8010797a170db414e4a654a72168ba5fde782609ab53db3661c80b5186b4e141b4d2061af475f23b5a67149bc50cc89d4daa6dd2355fa5d

    • memory/3232-101-0x0000000000400000-0x0000000000425000-memory.dmp

      Filesize

      148KB