Analysis

  • max time kernel
    140s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    27-06-2024 17:34

General

  • Target

    16e2d2a3756389facc54de6d6f146320_JaffaCakes118.exe

  • Size

    620KB

  • MD5

    16e2d2a3756389facc54de6d6f146320

  • SHA1

    0f7eb9dbe45dcf080df3e81504ba50683eb82f41

  • SHA256

    7069b7ef6b02a1afa26f5c1f4da18fb23797929467183d4b0b87001ebcf00254

  • SHA512

    fe0c0671c8d8d0d05e5383f7a59834d19c35d81f832543cfe7982dddaac68ec408090bd3e86c67b85b01c20735e47ca67f088a1ee81fc3a4d7e7d6f42a95e922

  • SSDEEP

    12288:9s9LnUauV0BIfsgVjU7424qnGgYi5WGJZPP7BHigTsv+BJOf:6RrIUwj0/7WGJZPzBCgTvBQf

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\16e2d2a3756389facc54de6d6f146320_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\16e2d2a3756389facc54de6d6f146320_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    PID:2240

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\fun.dll

    Filesize

    28KB

    MD5

    679bf4b879537547244106f1198f8f7f

    SHA1

    199360a4e163bfe1358ab18c9c11d3b1934129f9

    SHA256

    81cfe26ee06e165ca7f38cd5eb42ea60990be88305442dca689ce8e0f18891fa

    SHA512

    754a43c351fbdf05c7813db3d711da657645a6c9ced0dd9ef8efdc28d157efd0503122c75a4ad44fcb7d890f71f700acf99e7c428fb360a76cd384e86433cc80

  • \Users\Admin\AppData\Local\Temp\zlib1.dll

    Filesize

    58KB

    MD5

    80e41408f6d641dc1c0f5353a0cc8125

    SHA1

    6d957ba632df5b06d49a901f2772df4301610a2a

    SHA256

    b09537250201236472ccd3caff5c0c12a5fad262e1e951350e9e5ed2a81d9dde

    SHA512

    857d4dc087c73f00d79bf70edfc67ddc0b15a86a4fff366d91e5ef6684af43eed7dcf8579f6b4fb35dedd090973e2bde1a82aae07642136b608eeb1d567e5c03

  • memory/2240-0-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/2240-6-0x0000000000280000-0x0000000000293000-memory.dmp

    Filesize

    76KB

  • memory/2240-8-0x0000000000400000-0x00000000004A1000-memory.dmp

    Filesize

    644KB

  • memory/2240-10-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB