Analysis
-
max time kernel
131s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
-
submitted
25-06-2024 22:25
General
-
Target
0fc01af8e29b95db1e741ea48fde46a8_JaffaCakes118.exe
-
Size
351KB
-
MD5
0fc01af8e29b95db1e741ea48fde46a8
-
SHA1
3e456072447163678d41861b40f63d0ac14fcb35
-
SHA256
60c295e35ec0294bcbf40410ea7681be49f5f443f950a3b31a002020429419ba
-
SHA512
00da5bc6c5a52742b80e28fac96cbd65c8c90f093131e29d0143d5ed74e53906b9f574b94491a1cf27bcf0b350e5f2f63f2771113c169aad8a62689525bf8a2b
-
SSDEEP
6144:ZXDHBOgzF2idZecnl20lHRxp3g8FcHa5EGUalE0WnERq8xwnZ3IsM6wq:FDHB5xF3Z4mxxsHa5EGUeEJER1gBIsMQ
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0fc01af8e29b95db1e741ea48fde46a8_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0fc01af8e29b95db1e741ea48fde46a8_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\ºÚµ°µ°.exeC:\Users\Admin\AppData\Local\Temp\IXP000.TMP\ºÚµ°µ°.exe2⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD51957bef6c226652737dc1c8564138533
SHA175fc7345ea7c6bb7410d325881985db931667d56
SHA25671ce4fde1249ebdbaf620fb4e1ef15675a655de53a9f1fb8fe3c896e43b26fa8
SHA5125eed613de95ba46dbac5d4ba983acbbbaeb623a70db7386353e921d2fcf18e4e3913194d8fb16050f7dbc5551b4765663bda5becacc2c0bf09d65faecccc807f
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
336KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
436KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
336KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
436KB
-
Filesize
4KB
-
Filesize
4KB