Analysis

  • max time kernel
    147s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04-06-2024 14:04

General

  • Target

    951acc18e4f14471f49235327e0c1ccc_JaffaCakes118.exe

  • Size

    569KB

  • MD5

    951acc18e4f14471f49235327e0c1ccc

  • SHA1

    7fbe0b3af47957234f3fe22ae9de37ea7416c573

  • SHA256

    09557d538aee094d168a4b4fb5174d742fe81dd59dd27e2eee078fb3f10d9017

  • SHA512

    779b99299928b64eb777cec3c92364e1e7bb30f6192a88773d2521c6dc3a5000062a26418069819e4590b85d717041553aed214dc4ac68fa74825f6b565e25f7

  • SSDEEP

    6144:wV11/Zb2BpZwQwu24P02TbE4xVP30UgvzVUc:wv1/Z3Q0WE4f/3yZN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\951acc18e4f14471f49235327e0c1ccc_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\951acc18e4f14471f49235327e0c1ccc_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1200

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1200-0-0x00000000024C0000-0x00000000024E8000-memory.dmp
    Filesize

    160KB

  • memory/1200-4-0x0000000180000000-0x000000018002A000-memory.dmp
    Filesize

    168KB

  • memory/1200-9-0x0000000002030000-0x0000000002056000-memory.dmp
    Filesize

    152KB

  • memory/1200-11-0x00007FFA14610000-0x00007FFA14805000-memory.dmp
    Filesize

    2.0MB

  • memory/1200-10-0x00007FFA146AD000-0x00007FFA146AE000-memory.dmp
    Filesize

    4KB

  • memory/1200-12-0x00007FFA14610000-0x00007FFA14805000-memory.dmp
    Filesize

    2.0MB

  • memory/1200-13-0x00007FFA14610000-0x00007FFA14805000-memory.dmp
    Filesize

    2.0MB

  • memory/1200-15-0x00007FFA14610000-0x00007FFA14805000-memory.dmp
    Filesize

    2.0MB