Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    27-06-2024 17:12

General

  • Target

    16d1ba506081179fb98dec5b1903569c_JaffaCakes118.exe

  • Size

    332KB

  • MD5

    16d1ba506081179fb98dec5b1903569c

  • SHA1

    cf11355fcb6f8b14425355a1f50386b9d033a737

  • SHA256

    d26d304d2cddbe32b2e57a1edb8f7b84d74e2cbaa29e23796d5e32fcee3b5f69

  • SHA512

    80ffcfae6e7e4305f405759b31843dac94fe69cb33198d09ae21755bf65d8df60ec26c4221a28c07aad0a746a6df144582eb0fdc44692d76195a4913ab98636f

  • SSDEEP

    6144:ydPUUMsuPOfhLTKfcpJRjJxBFvf7V65lQhzD44q83hBrfVrYL3qZ0YJK1ol:YMUM5POTRjLBYlqxfVUL3qms/

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\16d1ba506081179fb98dec5b1903569c_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\16d1ba506081179fb98dec5b1903569c_JaffaCakes118.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:1924

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1924-0-0x0000000000400000-0x00000000005C0000-memory.dmp

    Filesize

    1.8MB

  • memory/1924-1-0x0000000000400000-0x00000000005C0000-memory.dmp

    Filesize

    1.8MB

  • memory/1924-2-0x00000000003A0000-0x00000000003A1000-memory.dmp

    Filesize

    4KB

  • memory/1924-3-0x0000000000400000-0x00000000005C0000-memory.dmp

    Filesize

    1.8MB

  • memory/1924-4-0x00000000003A0000-0x00000000003A1000-memory.dmp

    Filesize

    4KB