Analysis

  • max time kernel
    139s
  • max time network
    123s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-06-2024 20:01

General

  • Target

    003fa18af56e5bc13d30a31763d074d5_JaffaCakes118.dll

  • Size

    98KB

  • MD5

    003fa18af56e5bc13d30a31763d074d5

  • SHA1

    0e058b0ffb2e45cc903f5e41995d6fbec9b28d20

  • SHA256

    bdf135f8f55966c821800ef377a6a95bb9c6fbb3424577da3cc323ae4cc78ec5

  • SHA512

    cf261ba0ab70e8c4c3e575844f140593f3a3c6ac724e5a806ade9c9625ef9a6f30dc0811660817e517233f044038c3d15d4127161300150b0d0bdfa11fe011b7

  • SSDEEP

    3072:VsJKR9uIDT8WJXpNLEBKcS4/l6CddPzsKb:SJKR9uIDT8WhrEg54/0CddPYK

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\003fa18af56e5bc13d30a31763d074d5_JaffaCakes118.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3416
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\003fa18af56e5bc13d30a31763d074d5_JaffaCakes118.dll,#1
      2⤵
      • Suspicious behavior: EnumeratesProcesses
      PID:2376

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads