Analysis

  • max time kernel
    141s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/06/2024, 08:06

General

  • Target

    19647d4ecf874d9f2626b0f1fb14d43f_JaffaCakes118.exe

  • Size

    73KB

  • MD5

    19647d4ecf874d9f2626b0f1fb14d43f

  • SHA1

    45c93b0ce49ccec5a72818d46d324da5d499b89e

  • SHA256

    40a47124d198ddb78c51800af927a48ac810161d645d28ee95cc8c44aa48c181

  • SHA512

    036b13c271e1efece57c85cf001a2052b0b5549e705e03aff099b9982e31bc024ebaf07b82c0b6370c52dd7bb7cc3810fe7645843505c8055e0995996443281c

  • SSDEEP

    1536:aZL5ngj1nqtEuFdnSuQMx/RvPjhARVUYoxgh:iL5ngBnqznSUhOVQ+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\19647d4ecf874d9f2626b0f1fb14d43f_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\19647d4ecf874d9f2626b0f1fb14d43f_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1728

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1728-1-0x0000000000020000-0x0000000000022000-memory.dmp

    Filesize

    8KB

  • memory/1728-0-0x0000000000400000-0x000000000042F000-memory.dmp

    Filesize

    188KB

  • memory/1728-2-0x0000000000400000-0x000000000042F000-memory.dmp

    Filesize

    188KB

  • memory/1728-4-0x0000000000400000-0x000000000042F000-memory.dmp

    Filesize

    188KB

  • memory/1728-5-0x0000000000400000-0x000000000042F000-memory.dmp

    Filesize

    188KB

  • memory/1728-6-0x0000000000400000-0x000000000042F000-memory.dmp

    Filesize

    188KB

  • memory/1728-7-0x0000000000020000-0x0000000000022000-memory.dmp

    Filesize

    8KB

  • memory/1728-8-0x0000000000400000-0x000000000042F000-memory.dmp

    Filesize

    188KB

  • memory/1728-9-0x0000000000400000-0x000000000042F000-memory.dmp

    Filesize

    188KB

  • memory/1728-10-0x0000000000400000-0x000000000042F000-memory.dmp

    Filesize

    188KB

  • memory/1728-11-0x0000000000400000-0x000000000042F000-memory.dmp

    Filesize

    188KB

  • memory/1728-12-0x0000000000400000-0x000000000042F000-memory.dmp

    Filesize

    188KB

  • memory/1728-13-0x0000000000400000-0x000000000042F000-memory.dmp

    Filesize

    188KB

  • memory/1728-14-0x0000000000400000-0x000000000042F000-memory.dmp

    Filesize

    188KB

  • memory/1728-15-0x0000000000400000-0x000000000042F000-memory.dmp

    Filesize

    188KB

  • memory/1728-16-0x0000000000400000-0x000000000042F000-memory.dmp

    Filesize

    188KB

  • memory/1728-17-0x0000000000400000-0x000000000042F000-memory.dmp

    Filesize

    188KB

  • memory/1728-18-0x0000000000400000-0x000000000042F000-memory.dmp

    Filesize

    188KB

  • memory/1728-19-0x0000000000400000-0x000000000042F000-memory.dmp

    Filesize

    188KB

  • memory/1728-20-0x0000000000400000-0x000000000042F000-memory.dmp

    Filesize

    188KB

  • memory/1728-21-0x0000000000400000-0x000000000042F000-memory.dmp

    Filesize

    188KB