86a5f9775293f65b77bc99d970326ef13e47510ab630f1add6299551a992567d | Triage

Analysis

max time kernel
147s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/07/2024, 22:49

Sharing

Report Analysis Logs

General

Target

23ba4afec771f086a7a25924071bdf0d_JaffaCakes118.exe
Size

4KB
MD5

23ba4afec771f086a7a25924071bdf0d
SHA1

5e54962debab06e5efb866dff67d96da601265a1
SHA256

86a5f9775293f65b77bc99d970326ef13e47510ab630f1add6299551a992567d
SHA512

21e4ecbed56b79ff1fbb9574c66fd4e1f84c267031f4e895e357c2862baa6b588b7f5bfe610da687f5cfab192eee3d7b40e87684b4a8fcfae34524c00438c1b0

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/1388-0-0x0000000000400000-0x0000000000407000-memory.dmp	upx
behavioral2/memory/1388-1-0x0000000000400000-0x0000000000407000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\23ba4afec771f086a7a25924071bdf0d_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\23ba4afec771f086a7a25924071bdf0d_JaffaCakes118.exe"
1⤵
PID:1388

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv
1⤵
PID:1812

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1388-0-0x0000000000400000-0x0000000000407000-memory.dmp

Filesize
28KB

Download
memory/1388-1-0x0000000000400000-0x0000000000407000-memory.dmp

Filesize
28KB

Download