Analysis

  • max time kernel
    145s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20-06-2024 14:36

General

  • Target

    06e38ece8ed5045aceec70b481cf6919_JaffaCakes118.exe

  • Size

    899KB

  • MD5

    06e38ece8ed5045aceec70b481cf6919

  • SHA1

    c0e995edc5bc8167a7adb659a507c609592f3467

  • SHA256

    c1831f8c478a0a14ed80285d05a1a836eb88fd7e0851db869e145708ba1b7075

  • SHA512

    3035b58d6072e5f8b9a21b476d5713df199f072ddb67c1c6e6f1140e1fc72919bfa28c10cbd931ae95db59bcf6d61505e74d3373160186feef5a061e292eba74

  • SSDEEP

    24576:QpIGyWhOBpV82QdLWzDluyLtn5pQ8J9TEdb:2DyWhOBpG2QdSFnBfQ8J9TEdb

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 48 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\06e38ece8ed5045aceec70b481cf6919_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\06e38ece8ed5045aceec70b481cf6919_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2332
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4048 --field-trial-handle=3060,i,1774866140584649235,8085848018931772189,262144 --variations-seed-version /prefetch:8
    1⤵
      PID:4312

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2332-0-0x0000000000400000-0x000000000051D000-memory.dmp

      Filesize

      1.1MB

    • memory/2332-1-0x00000000022E0000-0x0000000002323000-memory.dmp

      Filesize

      268KB

    • memory/2332-5-0x0000000002360000-0x0000000002361000-memory.dmp

      Filesize

      4KB

    • memory/2332-4-0x0000000000580000-0x0000000000581000-memory.dmp

      Filesize

      4KB

    • memory/2332-3-0x0000000002290000-0x0000000002291000-memory.dmp

      Filesize

      4KB

    • memory/2332-2-0x0000000002380000-0x0000000002381000-memory.dmp

      Filesize

      4KB

    • memory/2332-34-0x0000000002560000-0x0000000002561000-memory.dmp

      Filesize

      4KB

    • memory/2332-40-0x00000000027B0000-0x00000000027B1000-memory.dmp

      Filesize

      4KB

    • memory/2332-68-0x0000000002940000-0x0000000002941000-memory.dmp

      Filesize

      4KB

    • memory/2332-75-0x0000000000400000-0x000000000051D000-memory.dmp

      Filesize

      1.1MB

    • memory/2332-74-0x0000000002BD0000-0x0000000002BD1000-memory.dmp

      Filesize

      4KB

    • memory/2332-73-0x0000000002BE0000-0x0000000002BE1000-memory.dmp

      Filesize

      4KB

    • memory/2332-72-0x0000000002BF0000-0x0000000002BF1000-memory.dmp

      Filesize

      4KB

    • memory/2332-71-0x0000000002AC0000-0x0000000002AC1000-memory.dmp

      Filesize

      4KB

    • memory/2332-70-0x0000000002AA0000-0x0000000002AA1000-memory.dmp

      Filesize

      4KB

    • memory/2332-69-0x0000000002AB0000-0x0000000002AB1000-memory.dmp

      Filesize

      4KB

    • memory/2332-67-0x0000000002900000-0x0000000002901000-memory.dmp

      Filesize

      4KB

    • memory/2332-66-0x0000000002910000-0x0000000002911000-memory.dmp

      Filesize

      4KB

    • memory/2332-65-0x00000000028F0000-0x00000000028F1000-memory.dmp

      Filesize

      4KB

    • memory/2332-64-0x00000000028D0000-0x00000000028D1000-memory.dmp

      Filesize

      4KB

    • memory/2332-63-0x00000000028B0000-0x00000000028B1000-memory.dmp

      Filesize

      4KB

    • memory/2332-62-0x0000000002890000-0x0000000002891000-memory.dmp

      Filesize

      4KB

    • memory/2332-61-0x0000000002870000-0x0000000002871000-memory.dmp

      Filesize

      4KB

    • memory/2332-60-0x0000000002540000-0x0000000002541000-memory.dmp

      Filesize

      4KB

    • memory/2332-59-0x00000000027C0000-0x00000000027C1000-memory.dmp

      Filesize

      4KB

    • memory/2332-58-0x0000000002790000-0x0000000002791000-memory.dmp

      Filesize

      4KB

    • memory/2332-57-0x00000000027A0000-0x00000000027A1000-memory.dmp

      Filesize

      4KB

    • memory/2332-56-0x0000000002780000-0x0000000002781000-memory.dmp

      Filesize

      4KB

    • memory/2332-55-0x0000000002740000-0x0000000002741000-memory.dmp

      Filesize

      4KB

    • memory/2332-54-0x00000000025D0000-0x00000000025D1000-memory.dmp

      Filesize

      4KB

    • memory/2332-53-0x0000000002570000-0x0000000002571000-memory.dmp

      Filesize

      4KB

    • memory/2332-52-0x0000000002710000-0x0000000002711000-memory.dmp

      Filesize

      4KB

    • memory/2332-51-0x00000000026D0000-0x00000000026D1000-memory.dmp

      Filesize

      4KB

    • memory/2332-50-0x0000000002970000-0x0000000002971000-memory.dmp

      Filesize

      4KB

    • memory/2332-49-0x0000000002980000-0x0000000002981000-memory.dmp

      Filesize

      4KB

    • memory/2332-48-0x0000000002950000-0x0000000002951000-memory.dmp

      Filesize

      4KB

    • memory/2332-47-0x0000000002960000-0x0000000002961000-memory.dmp

      Filesize

      4KB

    • memory/2332-46-0x0000000002930000-0x0000000002931000-memory.dmp

      Filesize

      4KB

    • memory/2332-45-0x00000000028E0000-0x00000000028E1000-memory.dmp

      Filesize

      4KB

    • memory/2332-44-0x00000000028C0000-0x00000000028C1000-memory.dmp

      Filesize

      4KB

    • memory/2332-43-0x00000000028A0000-0x00000000028A1000-memory.dmp

      Filesize

      4KB

    • memory/2332-42-0x0000000002880000-0x0000000002881000-memory.dmp

      Filesize

      4KB

    • memory/2332-41-0x0000000002860000-0x0000000002861000-memory.dmp

      Filesize

      4KB

    • memory/2332-39-0x0000000002770000-0x0000000002771000-memory.dmp

      Filesize

      4KB

    • memory/2332-38-0x0000000002750000-0x0000000002751000-memory.dmp

      Filesize

      4KB

    • memory/2332-37-0x0000000002760000-0x0000000002761000-memory.dmp

      Filesize

      4KB

    • memory/2332-36-0x0000000002720000-0x0000000002721000-memory.dmp

      Filesize

      4KB

    • memory/2332-35-0x00000000025E0000-0x00000000025E1000-memory.dmp

      Filesize

      4KB

    • memory/2332-29-0x00000000026B0000-0x00000000026B1000-memory.dmp

      Filesize

      4KB

    • memory/2332-28-0x0000000002690000-0x0000000002691000-memory.dmp

      Filesize

      4KB

    • memory/2332-27-0x0000000002630000-0x0000000002631000-memory.dmp

      Filesize

      4KB

    • memory/2332-26-0x0000000002400000-0x0000000002401000-memory.dmp

      Filesize

      4KB

    • memory/2332-25-0x00000000026A0000-0x00000000026A1000-memory.dmp

      Filesize

      4KB

    • memory/2332-24-0x0000000002680000-0x0000000002681000-memory.dmp

      Filesize

      4KB

    • memory/2332-23-0x0000000002660000-0x0000000002661000-memory.dmp

      Filesize

      4KB

    • memory/2332-22-0x0000000002670000-0x0000000002671000-memory.dmp

      Filesize

      4KB

    • memory/2332-21-0x0000000002640000-0x0000000002641000-memory.dmp

      Filesize

      4KB

    • memory/2332-20-0x0000000002650000-0x0000000002651000-memory.dmp

      Filesize

      4KB

    • memory/2332-19-0x0000000002620000-0x0000000002621000-memory.dmp

      Filesize

      4KB

    • memory/2332-18-0x0000000002600000-0x0000000002601000-memory.dmp

      Filesize

      4KB

    • memory/2332-17-0x0000000002610000-0x0000000002611000-memory.dmp

      Filesize

      4KB

    • memory/2332-16-0x00000000023C0000-0x00000000023C1000-memory.dmp

      Filesize

      4KB

    • memory/2332-15-0x00000000023B0000-0x00000000023B1000-memory.dmp

      Filesize

      4KB

    • memory/2332-14-0x00000000023F0000-0x00000000023F1000-memory.dmp

      Filesize

      4KB

    • memory/2332-13-0x00000000025F0000-0x00000000025F1000-memory.dmp

      Filesize

      4KB

    • memory/2332-12-0x00000000023D0000-0x00000000023D5000-memory.dmp

      Filesize

      20KB

    • memory/2332-11-0x0000000002390000-0x0000000002391000-memory.dmp

      Filesize

      4KB

    • memory/2332-10-0x00000000025C0000-0x00000000025C1000-memory.dmp

      Filesize

      4KB

    • memory/2332-9-0x0000000002580000-0x0000000002581000-memory.dmp

      Filesize

      4KB

    • memory/2332-8-0x0000000002550000-0x0000000002551000-memory.dmp

      Filesize

      4KB

    • memory/2332-7-0x00000000023E0000-0x00000000023E3000-memory.dmp

      Filesize

      12KB

    • memory/2332-6-0x00000000023A0000-0x00000000023A1000-memory.dmp

      Filesize

      4KB

    • memory/2332-33-0x0000000002700000-0x0000000002701000-memory.dmp

      Filesize

      4KB

    • memory/2332-32-0x00000000026E0000-0x00000000026E1000-memory.dmp

      Filesize

      4KB

    • memory/2332-31-0x00000000026F0000-0x00000000026F1000-memory.dmp

      Filesize

      4KB

    • memory/2332-30-0x00000000026C0000-0x00000000026C1000-memory.dmp

      Filesize

      4KB

    • memory/2332-76-0x0000000002E10000-0x0000000002E11000-memory.dmp

      Filesize

      4KB

    • memory/2332-87-0x0000000002EB0000-0x0000000002EB1000-memory.dmp

      Filesize

      4KB

    • memory/2332-86-0x0000000002E90000-0x0000000002E91000-memory.dmp

      Filesize

      4KB

    • memory/2332-85-0x0000000002E60000-0x0000000002E61000-memory.dmp

      Filesize

      4KB

    • memory/2332-84-0x0000000002EA0000-0x0000000002EA1000-memory.dmp

      Filesize

      4KB

    • memory/2332-83-0x0000000002E80000-0x0000000002E81000-memory.dmp

      Filesize

      4KB

    • memory/2332-82-0x0000000002E70000-0x0000000002E71000-memory.dmp

      Filesize

      4KB

    • memory/2332-81-0x0000000002E40000-0x0000000002E41000-memory.dmp

      Filesize

      4KB

    • memory/2332-80-0x0000000002E50000-0x0000000002E51000-memory.dmp

      Filesize

      4KB

    • memory/2332-79-0x0000000002E20000-0x0000000002E21000-memory.dmp

      Filesize

      4KB

    • memory/2332-78-0x0000000002E30000-0x0000000002E31000-memory.dmp

      Filesize

      4KB

    • memory/2332-77-0x0000000002E00000-0x0000000002E01000-memory.dmp

      Filesize

      4KB

    • memory/2332-88-0x00000000022E0000-0x0000000002323000-memory.dmp

      Filesize

      268KB

    • memory/2332-89-0x0000000000400000-0x000000000051D000-memory.dmp

      Filesize

      1.1MB