Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    04/07/2024, 04:02

General

  • Target

    249064a7a7b511051333004f163169da_JaffaCakes118.exe

  • Size

    71KB

  • MD5

    249064a7a7b511051333004f163169da

  • SHA1

    5a87d80cf33840986e12454df39642c0623a6da4

  • SHA256

    e62db75f648658cf5cc7ee47f542b1d2b75a9efc77a957ca1582bf088696a3bc

  • SHA512

    fa4dbad1d65f3ce0834fc2d6499cb1b7de1e16a85fa9c742e9d174582d5bf078f5829a4372fe1cfa6a071a83fd3df1ce27d53ffb4be4ab9d665f28e59b28c709

  • SSDEEP

    1536:fDdRy59+1OfOjEPCvPZn6f9MkXdzmfRXnTJBX3ua7A:fDPQc1OfsbZ6fykN+RjHX3u+A

Score
6/10

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Suspicious behavior: RenamesItself 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\249064a7a7b511051333004f163169da_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\249064a7a7b511051333004f163169da_JaffaCakes118.exe"
    1⤵
    • Adds Run key to start application
    • Suspicious behavior: RenamesItself
    PID:2748

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2748-0-0x0000000000400000-0x0000000000444000-memory.dmp

          Filesize

          272KB

        • memory/2748-1-0x0000000000020000-0x0000000000023000-memory.dmp

          Filesize

          12KB

        • memory/2748-2-0x0000000000400000-0x0000000000444000-memory.dmp

          Filesize

          272KB

        • memory/2748-4-0x0000000000400000-0x0000000000444000-memory.dmp

          Filesize

          272KB

        • memory/2748-6-0x0000000000020000-0x0000000000023000-memory.dmp

          Filesize

          12KB

        • memory/2748-15-0x0000000000400000-0x0000000000444000-memory.dmp

          Filesize

          272KB

        • memory/2748-16-0x0000000000400000-0x0000000000444000-memory.dmp

          Filesize

          272KB