Analysis

  • max time kernel
    148s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05-07-2024 16:43

General

  • Target

    270a1e101ef5b5692847a514d915392f_JaffaCakes118.exe

  • Size

    633KB

  • MD5

    270a1e101ef5b5692847a514d915392f

  • SHA1

    7bf5f171d4b55ccf6afb01b1a86124795c91afd0

  • SHA256

    d9b7dfbc6c364c6d1a743e25027c7e5164a355e74cc682be47f93e7244563436

  • SHA512

    2957d7df613f150e7b5236427cbc2531f9acd795966d9555d973556591aad8356939c5b60ee285bb3830c88fb0322d36dad7a6da6c2eeb892899466070365b27

  • SSDEEP

    12288:/z05p/hXiGGK0cH1c1PSyAnH0UQWFWDjDKmTl/gl7+Qwy:sJhX9GK0ciQI/+mTRgco

Score
8/10

Malware Config

Signatures

  • Drops file in Drivers directory 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\270a1e101ef5b5692847a514d915392f_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\270a1e101ef5b5692847a514d915392f_JaffaCakes118.exe"
    1⤵
    • Drops file in Drivers directory
    • Suspicious use of SetWindowsHookEx
    PID:3516

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3516-0-0x0000000000400000-0x0000000000548000-memory.dmp

    Filesize

    1.3MB

  • memory/3516-1-0x0000000002A70000-0x0000000002AC0000-memory.dmp

    Filesize

    320KB

  • memory/3516-11-0x00000000034E0000-0x00000000034E1000-memory.dmp

    Filesize

    4KB

  • memory/3516-85-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-86-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-84-0x00000000034E0000-0x00000000034E1000-memory.dmp

    Filesize

    4KB

  • memory/3516-83-0x00000000034E0000-0x00000000034E1000-memory.dmp

    Filesize

    4KB

  • memory/3516-77-0x0000000002D20000-0x0000000002D21000-memory.dmp

    Filesize

    4KB

  • memory/3516-78-0x00000000034E0000-0x00000000034E1000-memory.dmp

    Filesize

    4KB

  • memory/3516-79-0x0000000002D40000-0x0000000002D41000-memory.dmp

    Filesize

    4KB

  • memory/3516-80-0x00000000034E0000-0x00000000034E1000-memory.dmp

    Filesize

    4KB

  • memory/3516-81-0x00000000034E0000-0x00000000034E1000-memory.dmp

    Filesize

    4KB

  • memory/3516-82-0x00000000034E0000-0x00000000034E1000-memory.dmp

    Filesize

    4KB

  • memory/3516-76-0x0000000002CF0000-0x0000000002CF1000-memory.dmp

    Filesize

    4KB

  • memory/3516-75-0x0000000002D30000-0x0000000002D31000-memory.dmp

    Filesize

    4KB

  • memory/3516-74-0x0000000002D00000-0x0000000002D01000-memory.dmp

    Filesize

    4KB

  • memory/3516-73-0x0000000002D10000-0x0000000002D11000-memory.dmp

    Filesize

    4KB

  • memory/3516-72-0x0000000002D50000-0x0000000002D51000-memory.dmp

    Filesize

    4KB

  • memory/3516-71-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-70-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-69-0x00000000034E0000-0x00000000034E1000-memory.dmp

    Filesize

    4KB

  • memory/3516-68-0x00000000034E0000-0x00000000034E1000-memory.dmp

    Filesize

    4KB

  • memory/3516-67-0x00000000034E0000-0x00000000034E1000-memory.dmp

    Filesize

    4KB

  • memory/3516-66-0x00000000034E0000-0x00000000034E1000-memory.dmp

    Filesize

    4KB

  • memory/3516-65-0x00000000034E0000-0x00000000034E1000-memory.dmp

    Filesize

    4KB

  • memory/3516-64-0x00000000034E0000-0x00000000034E1000-memory.dmp

    Filesize

    4KB

  • memory/3516-63-0x00000000034E0000-0x00000000034E1000-memory.dmp

    Filesize

    4KB

  • memory/3516-62-0x00000000034E0000-0x00000000034E1000-memory.dmp

    Filesize

    4KB

  • memory/3516-61-0x00000000034E0000-0x00000000034E1000-memory.dmp

    Filesize

    4KB

  • memory/3516-60-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-59-0x0000000002CC0000-0x0000000002CC1000-memory.dmp

    Filesize

    4KB

  • memory/3516-58-0x0000000002CB0000-0x0000000002CB1000-memory.dmp

    Filesize

    4KB

  • memory/3516-57-0x0000000002C70000-0x0000000002C71000-memory.dmp

    Filesize

    4KB

  • memory/3516-56-0x0000000002C40000-0x0000000002C41000-memory.dmp

    Filesize

    4KB

  • memory/3516-55-0x0000000002C80000-0x0000000002C81000-memory.dmp

    Filesize

    4KB

  • memory/3516-54-0x0000000002C50000-0x0000000002C51000-memory.dmp

    Filesize

    4KB

  • memory/3516-53-0x0000000002C60000-0x0000000002C61000-memory.dmp

    Filesize

    4KB

  • memory/3516-52-0x0000000002CA0000-0x0000000002CA1000-memory.dmp

    Filesize

    4KB

  • memory/3516-51-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-50-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-49-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-48-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-47-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-46-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-45-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-44-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-43-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-42-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-41-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-40-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-39-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-38-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-37-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-36-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-35-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-34-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-33-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-32-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-31-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-30-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-29-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-28-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-27-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-26-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-25-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-24-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-23-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-22-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-21-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-20-0x00000000034E0000-0x00000000034E1000-memory.dmp

    Filesize

    4KB

  • memory/3516-87-0x00000000034D0000-0x00000000034ED000-memory.dmp

    Filesize

    116KB

  • memory/3516-19-0x00000000034E0000-0x00000000034E1000-memory.dmp

    Filesize

    4KB

  • memory/3516-18-0x00000000034E0000-0x00000000034E1000-memory.dmp

    Filesize

    4KB

  • memory/3516-17-0x00000000034E0000-0x00000000034E1000-memory.dmp

    Filesize

    4KB

  • memory/3516-16-0x00000000034E0000-0x00000000034E1000-memory.dmp

    Filesize

    4KB

  • memory/3516-15-0x0000000002AD0000-0x0000000002AD1000-memory.dmp

    Filesize

    4KB

  • memory/3516-14-0x00000000034E0000-0x00000000034E1000-memory.dmp

    Filesize

    4KB

  • memory/3516-13-0x00000000034E0000-0x00000000034E1000-memory.dmp

    Filesize

    4KB

  • memory/3516-12-0x00000000034E0000-0x00000000034E1000-memory.dmp

    Filesize

    4KB

  • memory/3516-9-0x00000000034E0000-0x00000000034E1000-memory.dmp

    Filesize

    4KB

  • memory/3516-7-0x0000000002310000-0x0000000002311000-memory.dmp

    Filesize

    4KB

  • memory/3516-10-0x00000000034E0000-0x00000000034E1000-memory.dmp

    Filesize

    4KB

  • memory/3516-8-0x0000000002AF0000-0x0000000002AF1000-memory.dmp

    Filesize

    4KB

  • memory/3516-6-0x00000000022E0000-0x00000000022E1000-memory.dmp

    Filesize

    4KB

  • memory/3516-5-0x0000000002AC0000-0x0000000002AC1000-memory.dmp

    Filesize

    4KB

  • memory/3516-4-0x00000000022F0000-0x00000000022F1000-memory.dmp

    Filesize

    4KB

  • memory/3516-3-0x0000000002300000-0x0000000002301000-memory.dmp

    Filesize

    4KB

  • memory/3516-2-0x0000000002AE0000-0x0000000002AE1000-memory.dmp

    Filesize

    4KB

  • memory/3516-88-0x00000000034C0000-0x00000000034C2000-memory.dmp

    Filesize

    8KB

  • memory/3516-205-0x00000000022D0000-0x00000000022D1000-memory.dmp

    Filesize

    4KB

  • memory/3516-204-0x00000000022B0000-0x00000000022B1000-memory.dmp

    Filesize

    4KB

  • memory/3516-394-0x0000000000400000-0x0000000000548000-memory.dmp

    Filesize

    1.3MB

  • memory/3516-395-0x0000000002A70000-0x0000000002AC0000-memory.dmp

    Filesize

    320KB