Analysis

  • max time kernel
    92s
  • max time network
    122s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/06/2024, 23:53

General

  • Target

    0ffe93db0b341393b060552cb852b6ff_JaffaCakes118.exe

  • Size

    355KB

  • MD5

    0ffe93db0b341393b060552cb852b6ff

  • SHA1

    d632ca182a5b5243d3280ae2713f10871919e28e

  • SHA256

    da360a4acffe6c50546562333f1d0610f956c6903de3f3531e8aedf5cc4fd312

  • SHA512

    2db744769d7c97466b9066d332a0db6ef77c87b4af9931e666ad6814e04f572450bfcea15494c92e4d3ea099ac8456b32056ad0832919bba524216b20f8466d5

  • SSDEEP

    6144:noCb5nZUoK5JRBmo7/hbBm5I7E/iHyBm5I7E/i3CrEBm5I7E/icBm5I7E/i3CrU:oAZ4l/Di+Eq+i+EqyrIi+EqAi+EqyrU

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\0ffe93db0b341393b060552cb852b6ff_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\0ffe93db0b341393b060552cb852b6ff_JaffaCakes118.exe"
    1⤵
      PID:4420

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\Users\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\启动 Internet Explorer 浏览器.exe

            Filesize

            100KB

            MD5

            3d8c9731a831c70103fd41f55f225be7

            SHA1

            35756da4b70c4a2190a7066b517dbf73d15612d2

            SHA256

            975c6f76f1369d3b4a63e6c8a43d58a2505c1ff8a930632c64e684f595d4c4b1

            SHA512

            4c83e7f765dbb8df21ad838d51823cf931ad4696dc01ff7d799c8f3405d7eead1f237dea4be1c78b2c12de796d7c362bc5d76a986d0c9e9e0d758c9b0b3a3e2f

          • C:\Users\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\启动 Internet Explorer 浏览器.lnk

            Filesize

            799B

            MD5

            4169acc87a11452ae7a4be482e02a06d

            SHA1

            9243db24865459ec0437a5ca8aacb30b3384c492

            SHA256

            fd0e280676df3408200676d5b3c2f12ebb89cdda719735f140fb17650183d86c

            SHA512

            c3899a619baead91b128e2cac0fa407538f85e46391cd34cbd5de3ab44e0a8d6e9b6489cba6fbe8d79d8cc83c39286b55cd24aa5d2c4a9c350bf464e9b1c1167

          • memory/4420-20-0x0000000000400000-0x0000000000421000-memory.dmp

            Filesize

            132KB