Overview

overview

7

Static

static

3

180f90cad1...18.exe

windows7-x64

7

180f90cad1...18.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    125s
  • max time network
    127s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28-06-2024 00:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    180f90cad1808964dab716a6b56309be_JaffaCakes118.exe

  • Size

    20KB

  • MD5

    180f90cad1808964dab716a6b56309be

  • SHA1

    b9563e9116ed3ace91c6737cfea8e5a86c3d48cd

  • SHA256

    c5fff2663b4513a2ac33dde1570f8e97e8f710b2368a8e45dff92f450d2ec9e0

  • SHA512

    b411c711f14659c758e2180d1f623327be458c38a069a5b84d0fd578673b566d9e74f042d3a8f9379442d9894c0bdfdc9031a5d9547d3b31c5820aff2a8e9afb

  • SSDEEP

    384:y4J82hYqyDeO5guQKrdu4NKhy2rlJyVVRboBmXBas4:yd2hYqlO5guQWQGK3lJEVRboE8

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Windows\Explorer.EXE
    C:\Windows\Explorer.EXE
    1⤵
      PID:3524
      • C:\Users\Admin\AppData\Local\Temp\180f90cad1808964dab716a6b56309be_JaffaCakes118.exe
        "C:\Users\Admin\AppData\Local\Temp\180f90cad1808964dab716a6b56309be_JaffaCakes118.exe"
        2⤵
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:4652
        • C:\Windows\SysWOW64\cmd.exe
          C:\Windows\system32\cmd.exe /c c:\Deleteme.bat
          3⤵
            PID:3268
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3980,i,13281073920029625837,8253721632651544158,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
        1⤵
          PID:532

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \??\c:\Deleteme.bat
          Filesize

          212B

          MD5

          0dbde7528a34933b66c27c0b392e7a85

          SHA1

          7a3cf079b41444d62b3ecdd166479e5779fcc4a8

          SHA256

          04fad1d4b4c3e1b823971dbd48561e5ac988762a4e8b0e872221ce8273899b41

          SHA512

          b8890cf05a40cf53e30beed0f02555c3b7905aafdc31866ae6ad483779bce2cabe77857c0ad6d657c356315e8c25666ddd69c98eda9605ea9d5778de7ec2293a

          Download Submit

        • memory/4652-2-0x0000000018140000-0x000000001814C000-memory.dmp

          Filesize

          48KB

          Download