d26decc30b46a16c053e599b65904e850002da0a8e609e9a2aff2b8b8ca8d3fa

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
28-06-2024 03:51

Target

18ae6ed31354d4de91cb41530d154d2f_JaffaCakes118.exe
Size

49KB
MD5

18ae6ed31354d4de91cb41530d154d2f
SHA1

5ce2a0c4eb0d51ea26c45b470d92a9648753e0ae
SHA256

d26decc30b46a16c053e599b65904e850002da0a8e609e9a2aff2b8b8ca8d3fa
SHA512

cd42110f53755908a1ad9afb321aeb264f762fecafe4403b3c9468e44de1d33760b859aef6c6ceb25d552cd594da26f1e4c72e1a4bbd2ec803a0ab6caf4b89db
SSDEEP

768:eZ86Ct9O2wlPdPGzUiHP/aY9EurVQCUYZXk2+hwCDdU2i1jtddx4Co8tILSngcnx:ewt9OawiHCurU2+wOd9inpngcnnx

Score

8^/10

Drops file in Drivers directory 4 IoCs

description	ioc	Process
File opened for modification	C:\Windows\system32\drivers\etc\hosts	18ae6ed31354d4de91cb41530d154d2f_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\drivers\etc\hosts	18ae6ed31354d4de91cb41530d154d2f_JaffaCakes118.exe
File created	C:\Windows\System32\drivers\etc\hîsts	18ae6ed31354d4de91cb41530d154d2f_JaffaCakes118.exe
File opened for modification	C:\Windows\System32\drivers\etc\hîsts	18ae6ed31354d4de91cb41530d154d2f_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\18ae6ed31354d4de91cb41530d154d2f_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\18ae6ed31354d4de91cb41530d154d2f_JaffaCakes118.exe"
1⤵
- Drops file in Drivers directory
PID:1220

C:\Users\Admin\AppData\Local\Temp\1125.tmp

Filesize
22KB

MD5
3f3ab986e80e13d2dcbcbb9887308a42

SHA1
ce4b85be6723ee8ecb8471a5b6928dde20c04e5f

SHA256
f48ed557474d77f30b27c05da4438e07b29d5bad4821aca889e0e18a41826364

SHA512
a924393255c2bb6fc973b73da0d8688098b1ee5b81c0f29a5df78aac2d4833057084b101827b0ec39cdbb7944cd398ea1847f743ce2293520a45828f214299a5

Download Submit
memory/1220-39-0x0000000000400000-0x0000000000412000-memory.dmp

Filesize
72KB

Download