Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/06/2024, 19:15

General

  • Target

    001d72c5952a76abc4565a988bd8619e_JaffaCakes118.exe

  • Size

    16KB

  • MD5

    001d72c5952a76abc4565a988bd8619e

  • SHA1

    6ec0ec090303f7f141881f2e14c54b9dbf56fcba

  • SHA256

    71ff0bfeb5d617e7d4c4b0a268b4932e821196377aee506a28da5c81b8caa14f

  • SHA512

    fea51e998019352f23c6bfa2e9fcc4d4d3e26978138846b9d6a3d0565d79098ff2a31007968436ebd328e32a96c7734768c01b37a3ea8fbb4b049805faefb64a

  • SSDEEP

    384:SQZQPx8/F3kmg6sP3fOvk9+ZK7DFnP7EEQZw:fZQPx8/R6nffkkkZK7DFnjENO

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\001d72c5952a76abc4565a988bd8619e_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\001d72c5952a76abc4565a988bd8619e_JaffaCakes118.exe"
    1⤵
      PID:3708
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3708 -s 460
        2⤵
        • Program crash
        PID:1352
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3708 -s 464
        2⤵
        • Program crash
        PID:3004
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3708 -ip 3708
      1⤵
        PID:4884
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 3708 -ip 3708
        1⤵
          PID:3028

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads