Analysis

  • max time kernel
    140s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25/06/2024, 05:59

General

  • Target

    0ceb2f83978bcc5822f2f5604b81599e_JaffaCakes118.exe

  • Size

    788KB

  • MD5

    0ceb2f83978bcc5822f2f5604b81599e

  • SHA1

    c90202b338541e39d2e6f5947bf5891a3d6d5422

  • SHA256

    5e6d02844d8d95811a3c46a105122d5fd6c62e148de09cacbc623195bcf4a4ec

  • SHA512

    6bd4942e458302a19cd0aa2ccef72d1fbc280359efd0612ec7d0dce89670aa88bcecfab87f246b3d86317860e4e680f12698c91433719fde347df77d5b674013

  • SSDEEP

    12288:UPB5rWFapRLypcYimyHTQl/xsmy6XEtm5Yayq6xGJOpq7w4Be8Zep3:eWuRL86myHc1Ch6Xkm5pL0Gkpn4i3

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0ceb2f83978bcc5822f2f5604b81599e_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\0ceb2f83978bcc5822f2f5604b81599e_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:1924

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1924-1-0x00000000003A0000-0x00000000003FA000-memory.dmp

          Filesize

          360KB

        • memory/1924-0-0x0000000000400000-0x00000000005AD000-memory.dmp

          Filesize

          1.7MB

        • memory/1924-9-0x00000000031A0000-0x00000000031A1000-memory.dmp

          Filesize

          4KB

        • memory/1924-8-0x0000000000290000-0x0000000000291000-memory.dmp

          Filesize

          4KB

        • memory/1924-7-0x00000000022F0000-0x00000000022F1000-memory.dmp

          Filesize

          4KB

        • memory/1924-6-0x0000000000270000-0x0000000000271000-memory.dmp

          Filesize

          4KB

        • memory/1924-5-0x0000000000390000-0x0000000000391000-memory.dmp

          Filesize

          4KB

        • memory/1924-25-0x0000000002370000-0x0000000002371000-memory.dmp

          Filesize

          4KB

        • memory/1924-27-0x0000000000260000-0x0000000000261000-memory.dmp

          Filesize

          4KB

        • memory/1924-26-0x0000000000240000-0x0000000000241000-memory.dmp

          Filesize

          4KB

        • memory/1924-24-0x0000000002400000-0x0000000002401000-memory.dmp

          Filesize

          4KB

        • memory/1924-23-0x00000000023D0000-0x00000000023D1000-memory.dmp

          Filesize

          4KB

        • memory/1924-22-0x00000000023C0000-0x00000000023C1000-memory.dmp

          Filesize

          4KB

        • memory/1924-21-0x0000000002410000-0x0000000002411000-memory.dmp

          Filesize

          4KB

        • memory/1924-20-0x0000000002430000-0x0000000002431000-memory.dmp

          Filesize

          4KB

        • memory/1924-19-0x00000000023F0000-0x00000000023F1000-memory.dmp

          Filesize

          4KB

        • memory/1924-18-0x0000000002320000-0x0000000002321000-memory.dmp

          Filesize

          4KB

        • memory/1924-17-0x0000000002360000-0x0000000002361000-memory.dmp

          Filesize

          4KB

        • memory/1924-16-0x00000000023A0000-0x00000000023A1000-memory.dmp

          Filesize

          4KB

        • memory/1924-15-0x0000000002380000-0x0000000002381000-memory.dmp

          Filesize

          4KB

        • memory/1924-14-0x0000000002390000-0x0000000002391000-memory.dmp

          Filesize

          4KB

        • memory/1924-13-0x0000000002340000-0x0000000002341000-memory.dmp

          Filesize

          4KB

        • memory/1924-12-0x0000000003190000-0x0000000003192000-memory.dmp

          Filesize

          8KB

        • memory/1924-11-0x0000000000340000-0x0000000000341000-memory.dmp

          Filesize

          4KB

        • memory/1924-10-0x00000000031A0000-0x00000000031A1000-memory.dmp

          Filesize

          4KB

        • memory/1924-4-0x0000000001FC0000-0x0000000001FC1000-memory.dmp

          Filesize

          4KB

        • memory/1924-3-0x00000000022E0000-0x00000000022E1000-memory.dmp

          Filesize

          4KB

        • memory/1924-2-0x00000000002B0000-0x00000000002B1000-memory.dmp

          Filesize

          4KB

        • memory/1924-28-0x0000000000400000-0x00000000005AD000-memory.dmp

          Filesize

          1.7MB

        • memory/1924-29-0x00000000003A0000-0x00000000003FA000-memory.dmp

          Filesize

          360KB