Analysis

  • max time kernel
    124s
  • max time network
    128s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15-06-2024 18:50

General

  • Target

    afdc09a68f003d34e2891f1b983191ac_JaffaCakes118.exe

  • Size

    271KB

  • MD5

    afdc09a68f003d34e2891f1b983191ac

  • SHA1

    ffd7471401cb722acef2be9632b8ec773d5f5e3e

  • SHA256

    12dd3ad863773005bc370d8f06bc9bdfa2309adef27a8fec89fb8e226965d03a

  • SHA512

    4f7f1d8aa7f257969527f25f1a4307238032c2d6df7eec009a8a6d0c9eff99970ccc5e12dfa010e4ef1f1de2f59b4b2c14a09759e173b43114f8c61e1c42b454

  • SSDEEP

    6144:fBPq2ppX2eV8UsM3yrdz4hdNJZPh04mjMTrTb3r8X5Tpt:fBi2PX2UaZyZZSj+wX5Tpt

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\afdc09a68f003d34e2891f1b983191ac_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\afdc09a68f003d34e2891f1b983191ac_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    PID:3580
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4156,i,7869973516895866428,11647313872437892197,262144 --variations-seed-version --mojo-platform-channel-handle=3980 /prefetch:8
    1⤵
      PID:1092

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\Tsu-0DFC.dll

      Filesize

      266KB

      MD5

      1c621f6a52f814921b9b42156b63f8c9

      SHA1

      6f0f75cf627075eee134f9a9ccfee26203800cee

      SHA256

      44c4e0d5b3686153c7647087a61972a010ba7e19b61cdabe801b1004778b9c36

      SHA512

      60425d4ce7f8b57bb3701c3f883b8a18e7cedfac723d5fb13d1aa6624057981555d8812ab50a785138d4fc0312f1da8f516b658c0230b32b211eedc2c754ac16

    • C:\Users\Admin\AppData\Local\Temp\{793F0B35-D7A4-AA87-486C-9F86A2DC29C3}\_Setup.dll

      Filesize

      170KB

      MD5

      1bfe976c0a18b0502d641f340f5220b6

      SHA1

      ba1213c32aeefc8a7ec55a75ea9d7f3b0ad5e7a8

      SHA256

      4679aef36baa2271bb29be4e226a444826f237fbe1c5d90842df0ea178fd5d3c

      SHA512

      51ca9be14df67e1b1ff071c26fc937c8cf650e4deedf622f560c8514481dbc489a0bad18ba30b258599f585ee56a6921f295a604206487fdda91ac243d65f3be

    • C:\Users\Admin\AppData\Local\Temp\{793F0B35-D7A4-AA87-486C-9F86A2DC29C3}\_Setupx.dll

      Filesize

      28KB

      MD5

      856666740a759d556705602afde5a11b

      SHA1

      13580b41862c667c5e2db918d6b90abe6ef17270

      SHA256

      cb9c5c311c07c557f54a78734906c78de79404083323f307a2b0f918ea76e969

      SHA512

      36ad035c2e794256c6004e7445f83b47590186b2c5e47ad48229d74bdb41a6c9c4f9f5440e0424d02ba642a8bb0a2a978e4124c04c410454bf51a490ee3520b3