Analysis

  • max time kernel
    142s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/05/2024, 10:20

General

  • Target

    7c9c47e4046870e26669c9f28094c0c6_JaffaCakes118.exe

  • Size

    2.5MB

  • MD5

    7c9c47e4046870e26669c9f28094c0c6

  • SHA1

    bc3a2df26c2db45b6ad2e562aa8d0400a4a4adf1

  • SHA256

    3d6b17b7a4e4032d10f8f94ff3cad5db1236f1b1ad1cc03ceed0d77f8c64c082

  • SHA512

    67c7cada2aee9ab3469db0219c82c0ec61fa1f1658eb62c430486d412a22eb759cd10d4b1399923441e0033751d995fdc6b13064811ef75754864a6e41d3350c

  • SSDEEP

    6144:Ciu0ir2fa9/CfPlK+JZzjoQUXtSj8lWihD7M4+VB9BT7Dqqs/Uw:Cf0ir9/sHJZzytI8lvMxVB9RDqZ/Uw

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7c9c47e4046870e26669c9f28094c0c6_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\7c9c47e4046870e26669c9f28094c0c6_JaffaCakes118.exe"
    1⤵
    • Drops file in Windows directory
    PID:1620
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4012 --field-trial-handle=2284,i,15722001240173834669,15048020084704567542,262144 --variations-seed-version /prefetch:8
    1⤵
      PID:3340

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/1620-0-0x0000000000DD0000-0x0000000000DD1000-memory.dmp

            Filesize

            4KB

          • memory/1620-2-0x0000000000DF0000-0x0000000000DF1000-memory.dmp

            Filesize

            4KB

          • memory/1620-1-0x0000000000DE0000-0x0000000000DE1000-memory.dmp

            Filesize

            4KB

          • memory/1620-3-0x0000000001460000-0x0000000001461000-memory.dmp

            Filesize

            4KB

          • memory/1620-5-0x0000000001480000-0x0000000001481000-memory.dmp

            Filesize

            4KB

          • memory/1620-4-0x0000000001470000-0x0000000001471000-memory.dmp

            Filesize

            4KB

          • memory/1620-6-0x00000000014C0000-0x00000000014C1000-memory.dmp

            Filesize

            4KB

          • memory/1620-9-0x0000000001510000-0x0000000001511000-memory.dmp

            Filesize

            4KB

          • memory/1620-8-0x0000000001500000-0x0000000001501000-memory.dmp

            Filesize

            4KB

          • memory/1620-7-0x00000000014F0000-0x00000000014F1000-memory.dmp

            Filesize

            4KB

          • memory/1620-12-0x0000000001580000-0x0000000001581000-memory.dmp

            Filesize

            4KB

          • memory/1620-11-0x0000000001530000-0x0000000001531000-memory.dmp

            Filesize

            4KB

          • memory/1620-10-0x0000000001520000-0x0000000001522000-memory.dmp

            Filesize

            8KB

          • memory/1620-15-0x0000000004200000-0x0000000004201000-memory.dmp

            Filesize

            4KB

          • memory/1620-14-0x00000000015A0000-0x00000000015A1000-memory.dmp

            Filesize

            4KB

          • memory/1620-13-0x0000000001590000-0x0000000001591000-memory.dmp

            Filesize

            4KB

          • memory/1620-17-0x0000000004220000-0x0000000004221000-memory.dmp

            Filesize

            4KB

          • memory/1620-16-0x0000000004210000-0x0000000004211000-memory.dmp

            Filesize

            4KB

          • memory/1620-18-0x0000000004A40000-0x0000000004A41000-memory.dmp

            Filesize

            4KB

          • memory/1620-19-0x0000000004A50000-0x0000000004A51000-memory.dmp

            Filesize

            4KB

          • memory/1620-20-0x0000000004A90000-0x0000000004A91000-memory.dmp

            Filesize

            4KB

          • memory/1620-21-0x0000000004A60000-0x0000000004A8F000-memory.dmp

            Filesize

            188KB

          • memory/1620-28-0x0000000001550000-0x0000000001551000-memory.dmp

            Filesize

            4KB

          • memory/1620-27-0x0000000001540000-0x0000000001541000-memory.dmp

            Filesize

            4KB

          • memory/1620-26-0x0000000004AB0000-0x0000000004AB1000-memory.dmp

            Filesize

            4KB

          • memory/1620-25-0x0000000004AA0000-0x0000000004AA1000-memory.dmp

            Filesize

            4KB

          • memory/1620-30-0x0000000001570000-0x0000000001571000-memory.dmp

            Filesize

            4KB

          • memory/1620-29-0x0000000001560000-0x0000000001561000-memory.dmp

            Filesize

            4KB

          • memory/1620-31-0x0000000003E20000-0x0000000003E21000-memory.dmp

            Filesize

            4KB

          • memory/1620-36-0x0000000006BF0000-0x0000000006BF1000-memory.dmp

            Filesize

            4KB

          • memory/1620-37-0x0000000004AD0000-0x0000000004AD1000-memory.dmp

            Filesize

            4KB