Analysis

  • max time kernel
    93s
  • max time network
    94s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/06/2024, 22:35

General

  • Target

    8fac6783106a0c2ea64a65bd0093b009_JaffaCakes118.dll

  • Size

    64KB

  • MD5

    8fac6783106a0c2ea64a65bd0093b009

  • SHA1

    f36d6c8df1013f031f23dc42222cd9583b567a3b

  • SHA256

    9c38dbe9439f927367c082a4b6bb779f4333c94003d8be7645a52ab36923444d

  • SHA512

    42d2a9c902c5d4e8a989f1e8d84fb6483bbe14bfcaae7f5d59a328544bfaf9fcb8d7608b1027dfe990fb96b2957dfaee35233694504fc21d0af8a856ea2e3e66

  • SSDEEP

    1536:SQgosHrp6cO16Xb7ezBJcwb3jcdX680Y5d0bter:ngrH4qXXez3cc3jEXiRxer

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\8fac6783106a0c2ea64a65bd0093b009_JaffaCakes118.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4268
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\8fac6783106a0c2ea64a65bd0093b009_JaffaCakes118.dll,#1
      2⤵
        PID:3644

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads