Analysis

  • max time kernel
    147s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/06/2024, 16:52

General

  • Target

    16c21c7a18b2a97ed8a4632b1bb5688f_JaffaCakes118.exe

  • Size

    157KB

  • MD5

    16c21c7a18b2a97ed8a4632b1bb5688f

  • SHA1

    9643e1b5950dfc26c34e59d69593d53dc9504d84

  • SHA256

    c1da547ce4b25ecc9477dee3f7b2713956ce6ae35bd0ea7228867aa06e8fd874

  • SHA512

    d52cd40459ef196c33b1a1a4bdc923e59aec8e46e7d1f87a81815d279c21119fa1ac0843223cc33d529f6daad9adf0d532e168c24c96f5c88747fe6d7339b39e

  • SSDEEP

    3072:/YFZqfEQE9mM3EnsRWzUSJ/aQiTM80ItTJKOGn4PgirLMKdK:QCQ9mM3VR0tJCTMyJ4ggir4KdK

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\16c21c7a18b2a97ed8a4632b1bb5688f_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\16c21c7a18b2a97ed8a4632b1bb5688f_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:4228

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4228-0-0x0000000000570000-0x0000000000594000-memory.dmp

          Filesize

          144KB

        • memory/4228-1-0x0000000000400000-0x000000000042C000-memory.dmp

          Filesize

          176KB

        • memory/4228-3-0x0000000000400000-0x000000000042C000-memory.dmp

          Filesize

          176KB

        • memory/4228-2-0x0000000000400000-0x0000000000474000-memory.dmp

          Filesize

          464KB