0cbc6b33f3ec9e1cd9e21e9d0826b106e99f0204e6ab88f22de229e41da46440

Analysis

max time kernel
139s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
20/06/2024, 11:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

0571a0b06c0f1548bb18b3c360da23ff_JaffaCakes118.exe
Size

118KB
MD5

0571a0b06c0f1548bb18b3c360da23ff
SHA1

b3b7cfa0cc4c7a2d0c054b56e4649fcd56dedd93
SHA256

0cbc6b33f3ec9e1cd9e21e9d0826b106e99f0204e6ab88f22de229e41da46440
SHA512

94e802e7e79f561fd877186fad1473524a9a2379aa00b462b60f555ce2798cccc98f8338a1e203a10cdcfd84b528d69d599e0e38cea89c587a656dfcc0f483ee
SSDEEP

3072:Idb6bWbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7AlmeYi/ZY0LT:kOYwvP6bQ7yMP+DE827AAeYiq0f

Score

1^/10

Malware Config

Signatures

Modifies registry class 7 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{F9BA1AA9-CAD4-4C14-BDE6-922DFF5F6F38}\mac = "C2-1B-8D-59-DC-13"	0571a0b06c0f1548bb18b3c360da23ff_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{F9BA1AA9-CAD4-4C14-BDE6-922DFF5F6F38}\dlt = "1718881728"	0571a0b06c0f1548bb18b3c360da23ff_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.key	0571a0b06c0f1548bb18b3c360da23ff_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.key\	0571a0b06c0f1548bb18b3c360da23ff_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.key\ = "regfile"	0571a0b06c0f1548bb18b3c360da23ff_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\Software\Classes\WOW6432Node\CLSID\{F9BA1AA9-CAD4-4C14-BDE6-922DFF5F6F38}	0571a0b06c0f1548bb18b3c360da23ff_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{F9BA1AA9-CAD4-4C14-BDE6-922DFF5F6F38}\dlloadtime = "1718881728"	0571a0b06c0f1548bb18b3c360da23ff_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\0571a0b06c0f1548bb18b3c360da23ff_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\0571a0b06c0f1548bb18b3c360da23ff_JaffaCakes118.exe"
1⤵
- Modifies registry class
PID:3164

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3164-0-0x0000000000400000-0x0000000000424000-memory.dmp

Filesize
144KB

Download
memory/3164-1-0x0000000002070000-0x00000000020A0000-memory.dmp

Filesize
192KB

Download
memory/3164-2-0x0000000002060000-0x0000000002062000-memory.dmp

Filesize
8KB

Download
memory/3164-5-0x0000000002320000-0x0000000002321000-memory.dmp

Filesize
4KB

Download
memory/3164-16-0x00000000022D0000-0x00000000022D1000-memory.dmp

Filesize
4KB

Download
memory/3164-15-0x00000000022E0000-0x00000000022E1000-memory.dmp

Filesize
4KB

Download
memory/3164-14-0x00000000022B0000-0x00000000022B1000-memory.dmp

Filesize
4KB

Download
memory/3164-13-0x00000000022C0000-0x00000000022C1000-memory.dmp

Filesize
4KB

Download
memory/3164-12-0x0000000002350000-0x0000000002351000-memory.dmp

Filesize
4KB

Download
memory/3164-11-0x0000000002360000-0x0000000002361000-memory.dmp

Filesize
4KB

Download
memory/3164-10-0x00000000022F0000-0x00000000022F1000-memory.dmp

Filesize
4KB

Download
memory/3164-9-0x0000000002300000-0x0000000002301000-memory.dmp

Filesize
4KB

Download
memory/3164-8-0x0000000002330000-0x0000000002331000-memory.dmp

Filesize
4KB

Download
memory/3164-7-0x0000000002340000-0x0000000002341000-memory.dmp

Filesize
4KB

Download
memory/3164-6-0x0000000002310000-0x0000000002311000-memory.dmp

Filesize
4KB

Download
memory/3164-4-0x0000000002050000-0x0000000002051000-memory.dmp

Filesize
4KB

Download
memory/3164-17-0x0000000000400000-0x0000000000424000-memory.dmp

Filesize
144KB

Download
memory/3164-18-0x0000000002070000-0x00000000020A0000-memory.dmp

Filesize
192KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads