Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
-
submitted
19-06-2024 21:35
General
-
Target
009f151c4ca7f2d9a214fdf51cbdeace_JaffaCakes118.exe
-
Size
185KB
-
MD5
009f151c4ca7f2d9a214fdf51cbdeace
-
SHA1
a5d52335797bec7d3cab54b3b013e65aa8591deb
-
SHA256
8aa84b11e7903fe77c536bb629157a63eb575b36b23b0a61cef8977afc99caf5
-
SHA512
144215701a8969b4dd77db181fc9e37ecbb70422aadf7d72a71a3e3df1206f6d608fd919f98429f47df5af6a9138962e76a57fc8982e7cda06ea0fdc5046e4b3
-
SSDEEP
3072:6KBYqKA1fjID6YxDrpuboYuooDwRiZhRL94VmGs99:PBxpm6UcojZhN9G
Score
8/10
Malware Config
Signatures
-
Drops file in Drivers directory 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Drops file in Windows directory 1 IoCs
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\009f151c4ca7f2d9a214fdf51cbdeace_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\009f151c4ca7f2d9a214fdf51cbdeace_JaffaCakes118.exe"1⤵
- Drops file in Drivers directory
- Drops file in Windows directory
-
C:\Windows\SysWOW64\drivers\svngage.exeC:\Windows\SysWOW64\drivers\svngage.exe1⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1732 -s 2002⤵
- Program crash
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
185KB
MD5009f151c4ca7f2d9a214fdf51cbdeace
SHA1a5d52335797bec7d3cab54b3b013e65aa8591deb
SHA2568aa84b11e7903fe77c536bb629157a63eb575b36b23b0a61cef8977afc99caf5
SHA512144215701a8969b4dd77db181fc9e37ecbb70422aadf7d72a71a3e3df1206f6d608fd919f98429f47df5af6a9138962e76a57fc8982e7cda06ea0fdc5046e4b3
-
Filesize
205KB
-
Filesize
205KB
-
Filesize
205KB