Analysis

  • max time kernel
    147s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-06-2024 00:17

General

  • Target

    048b3798459f20a12f3984541905ce94_JaffaCakes118.dll

  • Size

    182KB

  • MD5

    048b3798459f20a12f3984541905ce94

  • SHA1

    d08aaeeb5a5413ffc12daff3f282e687273e804f

  • SHA256

    17ac68d493bfea94dd6f89aa0cde070ee1494c50403a7b51653ffc5e8bc82b68

  • SHA512

    43f9641a5d3255dfe1604a56c583be1ab18dad5b49f601ccd20fd9de8e1446c70250cee05945305d69b1378801d541ea644e4d2024f52c223cd81a8ab3e8ab68

  • SSDEEP

    3072:Q4a+9niEGl3JGbBSW6BrWn3VbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7Z:QMUEm3iBSKn3VwvP6bQ7yMP+DE827kV0

Score
1/10

Malware Config

Signatures

  • Modifies registry class 17 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\048b3798459f20a12f3984541905ce94_JaffaCakes118.dll
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4068
    • C:\Windows\SysWOW64\regsvr32.exe
      /s C:\Users\Admin\AppData\Local\Temp\048b3798459f20a12f3984541905ce94_JaffaCakes118.dll
      2⤵
      • Modifies registry class
      PID:3220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3220-0-0x0000000010000000-0x0000000010044000-memory.dmp

    Filesize

    272KB

  • memory/3220-2-0x0000000010000000-0x0000000010044000-memory.dmp

    Filesize

    272KB

  • memory/3220-1-0x0000000010028000-0x0000000010029000-memory.dmp

    Filesize

    4KB

  • memory/3220-3-0x0000000010000000-0x0000000010044000-memory.dmp

    Filesize

    272KB

  • memory/3220-14-0x0000000002F00000-0x0000000002F01000-memory.dmp

    Filesize

    4KB

  • memory/3220-13-0x0000000002F10000-0x0000000002F11000-memory.dmp

    Filesize

    4KB

  • memory/3220-12-0x0000000002EE0000-0x0000000002EE1000-memory.dmp

    Filesize

    4KB

  • memory/3220-11-0x0000000002EF0000-0x0000000002EF1000-memory.dmp

    Filesize

    4KB

  • memory/3220-10-0x0000000002EC0000-0x0000000002EC1000-memory.dmp

    Filesize

    4KB

  • memory/3220-9-0x0000000002ED0000-0x0000000002ED1000-memory.dmp

    Filesize

    4KB

  • memory/3220-8-0x0000000002EB0000-0x0000000002EB1000-memory.dmp

    Filesize

    4KB

  • memory/3220-7-0x0000000002E90000-0x0000000002E91000-memory.dmp

    Filesize

    4KB

  • memory/3220-6-0x0000000002E60000-0x0000000002E61000-memory.dmp

    Filesize

    4KB

  • memory/3220-5-0x0000000002E70000-0x0000000002E71000-memory.dmp

    Filesize

    4KB

  • memory/3220-4-0x0000000002E40000-0x0000000002E41000-memory.dmp

    Filesize

    4KB

  • memory/3220-15-0x0000000002F00000-0x0000000002F01000-memory.dmp

    Filesize

    4KB