Analysis
- max time kernel
141s - max time network
132s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
- submitted
26/05/2024, 03:41
General
- Target 743946b6bd170ffad17a58b0f5c06efc_JaffaCakes118.exe
- Size 4.7MB
- Sample240526-d86mxsec99
- SHA256 179f209f4d2178871b1b8d7d55353083143c885098f362c0dbb3b9d3f89a8f15
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Loads dropped DLL 3 IoCs
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\743946b6bd170ffad17a58b0f5c06efc_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\743946b6bd170ffad17a58b0f5c06efc_JaffaCakes118.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-C52H9.tmp\743946b6bd170ffad17a58b0f5c06efc_JaffaCakes118.tmp"C:\Users\Admin\AppData\Local\Temp\is-C52H9.tmp\743946b6bd170ffad17a58b0f5c06efc_JaffaCakes118.tmp" /SL5="$90068,4452546,488960,C:\Users\Admin\AppData\Local\Temp\743946b6bd170ffad17a58b0f5c06efc_JaffaCakes118.exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
743946b6bd170ffad17a58b0f5c06efc_JaffaCakes118.tmp
AppsetOfferImage.png
NativeUID.dll
Ya_distr_342x422.png
botva2.dll
memory/216-6-0x0000000000400000-0x0000000000587000-memory.dmp
memory/216-18-0x0000000003730000-0x000000000373F000-memory.dmp
memory/216-36-0x0000000003730000-0x000000000373F000-memory.dmp
memory/216-35-0x0000000000400000-0x0000000000587000-memory.dmp
memory/220-0-0x0000000000400000-0x0000000000481000-memory.dmp
memory/220-2-0x0000000000401000-0x0000000000412000-memory.dmp
memory/220-34-0x0000000000400000-0x0000000000481000-memory.dmp