e366dd35758d40fde92b3b26fba00bab93757019a4762108eb1083753aa34443

Analysis

max time kernel
144s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
11/06/2024, 10:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9ddf39be2751479721283781e734eafc_JaffaCakes118.exe
Size

519KB
MD5

9ddf39be2751479721283781e734eafc
SHA1

b30ec138297ba8e59aab88f1c7b47e97c74b6409
SHA256

e366dd35758d40fde92b3b26fba00bab93757019a4762108eb1083753aa34443
SHA512

c4f39b0d960240cfa103591de4e55e0ca875df13f9d4b390342e49c4d5fd7c9e6c4ae180d0ced7e87cbe2d7a2cc4ecc4b13dba96f25b60f49ebad65a97cfcf4c
SSDEEP

6144:1Jj0xNR+JUQWS6KOhaoO9D00qF+8W0qFul7X0qFk7Mpc0qFAlLVK0qFk7O0q71u:L0xNOP6dhaoXyilDCMm8lLkCO0q71u

Score

7^/10

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
2512	vVoF906.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2512	vVoF906.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2512	vVoF906.exe
2512	vVoF906.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 2332 wrote to memory of 2512	2332	9ddf39be2751479721283781e734eafc_JaffaCakes118.exe	92
PID 2332 wrote to memory of 2512	2332	9ddf39be2751479721283781e734eafc_JaffaCakes118.exe	92

C:\Users\Admin\AppData\Local\Temp\9ddf39be2751479721283781e734eafc_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\9ddf39be2751479721283781e734eafc_JaffaCakes118.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2332
- C:\Users\Admin\AppData\Local\Temp\vVoF906.exe
  C:\Users\Admin\AppData\Local\Temp\vVoF906.exe -domain=iqabrowser.com -env=2 -file=installer -ip=52.1.45.42:80 -pub_id= -setup_id=605 -srcid= -sub_id=
  2⤵
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of SetWindowsHookEx
  PID:2512

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3696 --field-trial-handle=3192,i,2785050981002401924,4037047756083432660,262144 --variations-seed-version /prefetch:8
1⤵
PID:4384

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\vVoF906.exe

Filesize
134KB

MD5
34314d75fb6ed91bd3b01808877bda9c

SHA1
93df7339f40e8a001c0850b898031227497572d5

SHA256
597e86ad778b1ff8b791915a45a45706afdccaff5652329aea41e6dd488a56f8

SHA512
2d8e30cf0297c682ba3cafb8ad9ca61d3e5a6257ac4e805797ff3b5dcd3a5e0b77217927a9e176e503225ac5c26e19228b7dd37c8f07512a04ad0d5fe413aa3d

Download Submit
memory/2512-4-0x00007FFED7BA3000-0x00007FFED7BA5000-memory.dmp

Filesize
8KB

Download
memory/2512-5-0x00000000007C0000-0x00000000007E6000-memory.dmp

Filesize
152KB

Download
memory/2512-6-0x00007FFED7BA0000-0x00007FFED8661000-memory.dmp

Filesize
10.8MB

Download
memory/2512-7-0x000000001B280000-0x000000001B382000-memory.dmp

Filesize
1.0MB

Download
memory/2512-9-0x00007FFED7BA3000-0x00007FFED7BA5000-memory.dmp

Filesize
8KB

Download
memory/2512-10-0x00007FFED7BA0000-0x00007FFED8661000-memory.dmp

Filesize
10.8MB

Download
memory/2512-13-0x00007FFED7BA0000-0x00007FFED8661000-memory.dmp

Filesize
10.8MB

Download
memory/2512-14-0x00007FFED7BA0000-0x00007FFED8661000-memory.dmp

Filesize
10.8MB

Download
memory/2512-15-0x00007FFED7BA0000-0x00007FFED8661000-memory.dmp

Filesize
10.8MB

Download
memory/2512-17-0x00007FFED7BA0000-0x00007FFED8661000-memory.dmp

Filesize
10.8MB

Download
memory/2512-31-0x00007FFED7BA0000-0x00007FFED8661000-memory.dmp

Filesize
10.8MB

Download
memory/2512-33-0x00007FFED7BA0000-0x00007FFED8661000-memory.dmp

Filesize
10.8MB

Download
memory/2512-34-0x00007FFED7BA0000-0x00007FFED8661000-memory.dmp

Filesize
10.8MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads