Analysis

  • max time kernel
    133s
  • max time network
    103s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04-06-2024 01:50

General

  • Target

    9354b2e749d11f48d80bfd92219fa387_JaffaCakes118.exe

  • Size

    314KB

  • MD5

    9354b2e749d11f48d80bfd92219fa387

  • SHA1

    24a3619fafdc112f69b1cba5606658f3b05b649e

  • SHA256

    068bef8e19d6a2dd7c6b801b458d075c188c6f21c8825b5d86b00645528c3f87

  • SHA512

    a6519d1fe53af122bc3a95c297a90c78f61357c46abb85f1b761123681f450ca02cb3780fecec0a4d53641f3df305834619df87f658db5c6a7d5ab4f59ed72a8

  • SSDEEP

    6144:xIIVP8i9RZEQCTJX7DKs0MlqOBKjKX05nx9Rlvu+I:aCP8i9PLCTJL+fEqO4jKyx9RlG+I

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9354b2e749d11f48d80bfd92219fa387_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\9354b2e749d11f48d80bfd92219fa387_JaffaCakes118.exe"
    1⤵
    • Drops file in Windows directory
    PID:1780

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1780-0-0x0000000000D50000-0x0000000000D51000-memory.dmp

    Filesize

    4KB

  • memory/1780-2-0x0000000000D70000-0x0000000000D71000-memory.dmp

    Filesize

    4KB

  • memory/1780-1-0x0000000000D60000-0x0000000000D61000-memory.dmp

    Filesize

    4KB

  • memory/1780-3-0x0000000000D90000-0x0000000000DB0000-memory.dmp

    Filesize

    128KB

  • memory/1780-4-0x0000000000D80000-0x0000000000D81000-memory.dmp

    Filesize

    4KB

  • memory/1780-9-0x0000000000D90000-0x0000000000DB0000-memory.dmp

    Filesize

    128KB

  • memory/1780-5-0x0000000001580000-0x00000000015AF000-memory.dmp

    Filesize

    188KB

  • memory/1780-17-0x0000000000D90000-0x0000000000DB0000-memory.dmp

    Filesize

    128KB