Analysis
-
max time kernel
140s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
28/05/2024, 21:48
General
-
Target
7e8387b66365db5349f40df496033336_JaffaCakes118.exe
-
Size
1.1MB
-
MD5
7e8387b66365db5349f40df496033336
-
SHA1
dc6718fd43f5e2935e3cdca482db351962178098
-
SHA256
084e6e7a9c385aa3707a25be37776869516b2c9014088c5ddc500bc0351f21ed
-
SHA512
512c83717d35d352df508ba560ce51aa8636e3234f15c81c26ff9cab76f24c1fc9c73f753b9b2f46f1bafe2c87387bc80b73cdf5f155684503125875b321f0d9
-
SSDEEP
24576:9aRjMf504xmyNaRTcDiiLr1U8f9bNEAjHdHpSIFBBDmuM8fdihg1gZ910Up3+F9S:H5pwiiK1Lp12AD2IntjM8XgD10Upu3S
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 3 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7e8387b66365db5349f40df496033336_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\7e8387b66365db5349f40df496033336_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-FMM8K.tmp\7e8387b66365db5349f40df496033336_JaffaCakes118.tmp"C:\Users\Admin\AppData\Local\Temp\is-FMM8K.tmp\7e8387b66365db5349f40df496033336_JaffaCakes118.tmp" /SL5="$400F4,903762,56832,C:\Users\Admin\AppData\Local\Temp\7e8387b66365db5349f40df496033336_JaffaCakes118.exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
701KB
MD5bf755c4f58eb089c70007f6da42e82f5
SHA10a9a09dc08d4fa9abab2c94cc5bc6956b1d6e134
SHA25694002e7b28d1752a9e52894be9e8685559c14ec41086e4a2e0a849b1f87050e6
SHA512dde26a3318c9c7d8ffc13d70d36ecc941c4d15e99d7163eacc625e8f76b3ed616cf61dcb33df4d36dbac64d4610d25a850dbaf094791fc0ab06bef7801e2606e
-
Filesize
22KB
MD592dc6ef532fbb4a5c3201469a5b5eb63
SHA13e89ff837147c16b4e41c30d6c796374e0b8e62c
SHA2569884e9d1b4f8a873ccbd81f8ad0ae257776d2348d027d811a56475e028360d87
SHA5129908e573921d5dbc3454a1c0a6c969ab8a81cc2e8b5385391d46b1a738fb06a76aa3282e0e58d0d2ffa6f27c85668cd5178e1500b8a39b1bbae04366ae6a86d3
-
Filesize
44KB
-
Filesize
84KB
-
Filesize
84KB
-
Filesize
764KB
-
Filesize
764KB