Analysis
-
max time kernel
135s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
29-05-2024 11:04
General
-
Target
8086778c1015d255bfbf3558aa88c4e2_JaffaCakes118.exe
-
Size
629KB
-
MD5
8086778c1015d255bfbf3558aa88c4e2
-
SHA1
23af1b1714fe0286a4031f2798ae19dd4f7305b6
-
SHA256
a073b78de7b2b5d859a17812585f825fbf71fbd940fa208f6853c744c1c64359
-
SHA512
1e9866e7da258279b3bad74b72d2e44eaa7e190f535d630e69206bdd22259889e58481ebd1128aae4006cd98843e5c03bda7feda0efc68eb6c843ed6f22516a2
-
SSDEEP
12288:xy5YtC/DXhT2t6Fm2j/6a7CvLjOFfbwwV+:johT2CXLwwV
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 16 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8086778c1015d255bfbf3558aa88c4e2_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\8086778c1015d255bfbf3558aa88c4e2_JaffaCakes118.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4964 -s 6282⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4964 -ip 49641⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
47.9MB
-
Filesize
1024KB
-
Filesize
336KB
-
Filesize
344KB
-
Filesize
47.9MB
-
Filesize
636KB
-
Filesize
636KB
-
Filesize
636KB
-
Filesize
636KB
-
Filesize
336KB
-
Filesize
344KB