Overview

overview

3

Static

static

3

6f7cfd80f7...18.exe

windows7-x64

3

6f7cfd80f7...18.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    133s
  • max time network
    130s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/05/2024, 18:48

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6f7cfd80f75202eccb37cb2edbce91d7_JaffaCakes118.exe

  • Size

    444KB

  • MD5

    6f7cfd80f75202eccb37cb2edbce91d7

  • SHA1

    136e59a26c03edd03b3c8f139c2fdd88bf66fb18

  • SHA256

    d13f9b15e1c658743eed89787bbdf79c7e4be8ed5623c7be6ba4cfbf892ab277

  • SHA512

    e638faecac834dbcd71e6ade504054c6c53eb0e2a17519ae085f6813a22fdcac34b1d3339cdfbd751820ee0b5ea35723ebb2997eb8e6af335fee1da3cd444bab

  • SSDEEP

    6144:/6tSLWZgVL3754EUZmfI3z+wGA1oAtZWJP56Pz:CHZ4b754EUZLz+SCA6Pkz

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6f7cfd80f75202eccb37cb2edbce91d7_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\6f7cfd80f75202eccb37cb2edbce91d7_JaffaCakes118.exe"
    1⤵
      PID:400
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 400 -s 332
        2⤵
        • Program crash
        PID:624
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 400 -ip 400
      1⤵
        PID:3704
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4236,i,1067197275908310731,12785105794523264014,262144 --variations-seed-version --mojo-platform-channel-handle=3852 /prefetch:8
        1⤵
          PID:4928

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/400-0-0x0000000000E20000-0x0000000000E92000-memory.dmp

          Filesize

          456KB

          Download