Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/05/2024, 19:02

General

  • Target

    6f85fa8a31beba8d43dd46aa83bdbf67_JaffaCakes118.exe

  • Size

    281KB

  • MD5

    6f85fa8a31beba8d43dd46aa83bdbf67

  • SHA1

    06d7a0e88ae0b410e01595b121f5ff1808228930

  • SHA256

    23a428a7da22471818ad82699ca69f9cc2f62f06bc966bd52f389d28654ddffc

  • SHA512

    0a26a393a5be678de32a4e743147f1603940afb6cbdfdea0d84ee57ecba4aad9a4c442898c88722eff48f6aefd35f15e731daed9f64730cab7fb0d094f557d76

  • SSDEEP

    6144:/r+yI5RxWBDg7V0eXze6OvA48UEJFeiCLxNw4QC8cdH:/r+yI3sBDJejgP0JHYz1f9H

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6f85fa8a31beba8d43dd46aa83bdbf67_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\6f85fa8a31beba8d43dd46aa83bdbf67_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    PID:876

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\Tsu0F674F50.dll

          Filesize

          269KB

          MD5

          73f84010494b1b9e4b478790bbd3d71a

          SHA1

          136f73ff2ccb0ca4a558f7b72f8d9641bf7ee7f0

          SHA256

          41a58310d5c51c6dea425a4dd7e79c7dea67be75915512990ac263ff8f6e02a0

          SHA512

          e57eddfb249597151e09c4aebd9d2d77239ce677cd47d944202ed2a2a68af042c7b0a9725c366414300647d11c3bdafe3f163c065b8b6c89efa56fc764ac2966

        • C:\Users\Admin\AppData\Local\Temp\{53EBE795-76D4-40B9-A252-3EF68808C563}\Custom.dll

          Filesize

          58KB

          MD5

          6e8a29b73d7cb2fff7f60d6160cdadcc

          SHA1

          76938d8f6282013f922782a04fb5591eab2901e1

          SHA256

          92748be00d20070b81c154d4bc048ffc2c7196e934f6b92ec49b235c16fb69ee

          SHA512

          f362a5e3dff4bcd77847bd9766ad73ada924ddade1215b972fee5a3ca6a67f9b0ac0763750caef549319b0edc7425fbdb6ca0bf8517e5eac423e12c54977997b

        • C:\Users\Admin\AppData\Local\Temp\{53EBE795-76D4-40B9-A252-3EF68808C563}\_Setup.dll

          Filesize

          145KB

          MD5

          355eecd5bbf7d156245ac6513c4badc3

          SHA1

          7dbde896f2e57f93f98ba898467ca89cef7b56ac

          SHA256

          381193a96c0aec47c27f458a5d8a706d131cf358ddf237b674263eed6d7e3c65

          SHA512

          bc6eb136f716ab2128ce31a8a5fde1c2b0498bfbad492c152e4a483bc267e20d17eb5c34977d1dfc9338b8088dfa4c70cad12022d148c1f02019df66d4974bd2